error: pcap_loop: recvfrom: Socket operation on non-socket

["Florian Huber" <florian.huber () mnet-online de>]

Hallo,
running snort 1.9.0 on a SuSE 7.2 box from a cronjob i get following errors:
    snort: pcap_loop: recvfrom: Socket operation on non-socket
    snort: Snort received signal 3, exiting

But i have no problems when starting snort from commandline.
I found out that someone had this problem before, but i don't know how to
handle his solution:

[q]
    Mark Wormgoor
    Wed Jan 02 2002 - 01:51:20 PST
    Hi,
    > On Sun, Dec 30, 2001 at 10:59:52AM +0100, Mark Wormgoor wrote:
    > > I have a small problem with starting snort from another program. I'm
    > > running snort 1.8.3 (from RPM) on a Redhat 7.2 based system.
    > > When I start snort from the command line, it will start just fine:
    > > /usr/sbin/snort -c /etc/snort/snort.conf -D -u snort -g
snort -d -e -z
    >
    > running snort non-root , while I nice idea, turns out to be a problem.
I
    had this same problem with my Demarc/Snort installation. I can't
remember
    the specific internal problems, but this stems from your other program
not
    having access to the pcap device, something along those lines...
    >
    > running snort as root, really doesn't hurt that much either ;)


    Well, I managed to solve the problem myself. Snort is started from a
setuid
    program. Therefor, stdin and stdout were closed before the system call
to
    start snort. Older versions of snort had no problems with this (1.8.1
for
    example).
    I have changed the program to reopen stdin from /dev/zero and stdout to
    /dev/null and my problem is solved :)


    Kind regards,


        Mark Wormgoor

[/q]

I hope that anyone can help me. Is this problem fixed in Snort 2.0?

TIA

     Florian Huber






-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users