help pcap problem

[James Fowler <santiago () eng utah edu>]

Hello.  I'm certain there are lots of newbie questions posted.  I was
unable to find a searchable archive of past postings (if anyone has a
URL).
My problem is this:
ERROR: OpenPcap() FSM compilation failed: parse error PCAP command: start
Fatal Error, Quitting.. Log directory = Reading Conf File... Initializing
Network Interface eth0 256

I compiled libcap 0.6.2 specifically for this.  I also recompiled my
kernel, 2.4.2, just to be certain.  Any ideas on what is causing this?  I
understand the error is with PCAP.   I have tried installing different
versions, 0.4.39 also.  Still doens't resolve the problem.  My best guess
is maybe an incompatibility between tcpdump and libpcap.  Any ideas?  Help
please.
This is an almost stock RH7.1 on x86 hardware.

Thanks,
James

------------------------------------------------------------------------------
James Fowler
Technology & Education                                  
jamesf () sequoia net                                           ICQ: 22088266
-----------------------------------------------------------------------------



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users