Snort in IPS mode

[turki <turki_00 () yahoo com>]

Hi,
I am new to snort, so i need help here.

I am trying to run snort in inline mode with the following command:
snort -Q --daq afpacket -i eth0 -c snort.conf

but snort initialization keeps failing with error message:

afpacket DAQ configured to inline.
ERROR: Can't initialize DAQ afpacket (-1) - afpacket_daq_initialize: Invalid interface specification: 'eth0'!
Fatal Error, Quitting..


I've managed to compile and run Snort as IDS without any problems:
snort -i eth0 -c snort.conf

- Do i have to do any modification in the snort.conf file?
- Is there any beginners tutorial for installing/running Snort in IPS mode?

running environment:
Ubuntu 11.04
Snort 2.9.0.5

Thank you

------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users