Re: Starting Snort Errors-Fedora3

[Paul Schmehl <pauls () utdallas edu>]

--On Friday, March 11, 2005 04:57:25 PM +0900 Mark Sargent 
<powderkeg () snow email ne jp> wrote:

> Hi All, am a Linux user, Fedora3. Rather new to it, and snort as well. I
> have installed snort and have apache/mysql running. Am following the
> tutorial for FC2 from Patrick S. Harper. I just tried starting snort and
> got the following,
>
>  [root@localhost snort]# snort -i 192.168.0.12 -dev

This is incorrect.  The -i switch is used to designate the *device* you 
want to sniff on, *not* the IP address.

It *should* be this:
snort -i eth0

Try using the -T switch to verify that everything is correct in your setup.
snort -i eth0 -c /etc/snort/snort.conf -T

"-dev" means:
-d         Dump the Application Layer
-e         Display the second layer header info
-v         Be verbose

Is that what you want?

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users