Snort mailing list archives
en0 problems
From: Allan Jensen <ajensen () bajensen de>
Date: Sun, 12 Dec 2004 16:01:59 +0100
I installed snort 2.2.0 on Mac OS X 10.3.6 together with ACID 0.9.6b23. Everything went fine. My problem is maybe not a snort problem. When I start snort:
sudo snort -vd -c /etc/snort/snort.conf
I get the following warning:
Running in IDS mode
Log directory = /var/log/snort
Initializing Network Interface en0
OpenPcap() device en0 network lookup:
en0: no IPv4 address assigned
--== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface en0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf
and nothing is output to ACID - or to mysql. I checked:
echo "SELECT count(*) FROM event" | mysql snort -u root -p )
which gives:
count(*)
0
Does anybody know how to tell snort to use the ppp0 interface for en0 ? Is this a Mac OS X issue?
Thanks,
Allan
Current thread:
- en0 problems Allan Jensen (Dec 13)