Re: ERROR: OpenPcap() FSM compilation failed:

[Nick Moore <nmoore () sourcefire com>]

Hadi,

I'm not sure what distro you are using nor if you compiled from scratch, but
here are some things I would check:

- Is daq properly compiled and installed?

- Do you have all the proper pcap libraries installed in place where snort
can find them?

- What command are you using to start snort?

In order to provide better help, we would need to kmow your llinux version,
your snort startup command, any set up guides you used....

Please lst us know.

Sent from my mobile

Nick Moore

On Feb 24, 2011 9:50 PM, "hadi tounsi" <hdtounsi () gmail com> wrote:

hello , i try to restat snort but it showing the following message :


*** interface device lookup found: eth0
***

Initializing Network Interface eth0
ERROR: OpenPcap() FSM compilation failed:
        syntax error
PCAP command: restart




please help me to get solution for the problem


regards hadi tounsi

security network

------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in
Real-Time with Splunk. Collect, index and harness all the fast moving IT
data
generated by your applications, servers and devices whether physical,
virtual
or in the cloud. Deliver compliance at lower cost and gain new business
insights. http://p.sf.net/sfu/splunk-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users