Snort mailing list archives

Re: Can't Start DAQ


From: Sean Liebhard <sliebhard () hodell-natco com>
Date: Mon, 14 Dec 2015 22:45:24 +0000

snort -d -A console -u snort -g snort -c /usr/local/etc/snort/snort.conf -i eth1:eth2 -Q

From: Al Lewis (allewi) [mailto:allewi () cisco com]
Sent: Monday, December 14, 2015 2:36 PM
To: Sean Liebhard; 'snort-users () lists sourceforge net'
Subject: RE: Can't Start DAQ

Hello,

What commands are you using to start snort?



Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi () cisco com<mailto:allewi () cisco com>

From: Sean Liebhard [mailto:sliebhard () hodell-natco com]
Sent: Monday, December 14, 2015 4:40 PM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] Can't Start DAQ

Following the SNORT IPS on VMware ESX guide @ https://www.snort.org/documents/snort-ips-tutorial

Installation went fine aside from some version differences.  When starting SNORT in inline mode the following error is 
generated:

ERROR: Can't start DAQ (-1) - bind_instance_interface: getsockopt: No such file or directory!
Fatal Error, Quitting..

I can't find anything in the mailing list or documentation with this specific error.

Any insight?

--Sean Liebhard

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: