Snort mailing list archives
Re: ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device!
From: Nelo Belda <nbelda () gmail com>
Date: Tue, 23 Oct 2012 11:56:25 +0200
Maybe you are trying to capture on a virtual device (dag0:0) that it isn't yet configured. Try to exec ifconfig to see if that device is up. Regards 2012/10/22 <jtravlos () rsignia com>
I forgot to add that I am running the command as root. -----Original Message----- *From:* jtravlos () rsignia com [mailto:jtravlos () rsignia com] *Sent:* Monday, October 22, 2012 01:23 PM *To:* snort-users () lists sourceforge net *Subject:* ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device! I'm a newbie with SNORT and I got it running, sort of. I am having two issues: 1) I did having SNORT working. I had to shutdown the system, when I rebooted, I started getting the following problem when I run SNORT. When I run the following commmand: snort -u snort -g snort -i dag0:0 -c /etc/snort/snort.conf NOTE:(dag0:0 = port A of the DAG card, dag0:2 = port B) Initializing Output Plugins! Log Directory = /data/snortlog pcap DAQ configured passive. Acquiring network traffic from 'dag0:0". ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device! Fatal Error, Quiting.. I get the same error if I run: snort -u snort -g snort -i dag0:0 I can capture data with a Endace DAG card. Tcpdump can see the DAG card and an capture traffic. I am runnig: CentOS 6.3 x86_64 SNORT 2.9.31 GRE (Build 40) Libpcap v 1.2.1 PCRE v 7.8 ZLIB v 1.2.3 tcpdump 4.0.0-3 daq 1.1.1-14 Endace 4.2.2 software Any help is appreciated. John Travlos ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device! jtravlos (Oct 22)
- Re: ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device! Nelo Belda (Oct 23)