Snort mailing list archives
Re: how to run snort from different linux directories
From: "Nathaniel Richmond" <nate+snort () richmond-family org>
Date: Sun, 5 Apr 2009 20:25:50 -0400 (EDT)
By the look of it, you're running as a normal user when it fails, and root when it succeeds. Snort can't open the interface in promiscuous mode if you're not running with root privileges. David Kingsly wrote:
I am running into some problems trying to activate snort. I seem to be able to run it fine from my Ubuntu's /usr/src/snort/snort-2.8.3.2 and /etc/snort directory, but when I try to run it from /usr/local/bin, I get the fullowing error message: @thunder:/usr/local/bin$ snort -v Running in packet dump mode --== Initializing Snort ==-- Initializing Output Plugins! Verifying Preprocessor Configurations! ERROR: Failed to lookup for interface: no suitable device found. Please specify one with -i switch Fatal Error, Quitting.. Here is what it looks like when I run it successfully: root@thunder:/etc/snort# snort -v Running in packet dump mode --== Initializing Snort ==-- Initializing Output Plugins! Verifying Preprocessor Configurations! *** *** interface device lookup found: eth0 *** Initializing Network Interface eth0 Decoding Ethernet on interface eth0 --== Initialization Complete ==-- ,,_ -*> Snort! <*- o" )~ Version 2.8.3.2 (Build 22) '''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html (C) Copyright 1998-2008 Sourcefire Inc., et al. Using PCRE version: 7.8 2008-09-05 Not Using PCAP_FRAMES ------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Real noob question craig bowser (Apr 02)
- Re: Real noob question matt donovan (Apr 02)
- Re: Real noob question Greg Bowser (Apr 02)
- Re: Real noob question Joel Esler (Apr 02)
- Re: Real noob question JJ Cummings (Apr 02)
- how to run snort from different linux directories David Kingsly (Apr 05)
- How to verify snort functionality David Kingsly (Apr 12)
- Re: How to verify snort functionality Joel Esler (Apr 12)
- how to run snort from different linux directories David Kingsly (Apr 05)
- Message not available
- Re: how to run snort from different linux directories Nathaniel Richmond (Apr 05)