Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm trying to learn network intrusion detection. When I try to launch Snort, in IDS mode, I get this message (I'm running Mac OS X):

Initializing Network Interface en1
ERROR: OpenPcap() FSM compilation failed: 
    syntax error
PCAP command: snort
Fatal Error, Quitting..

How can I fix this problem?

share|improve this question

migrated from stackoverflow.com Feb 26 '10 at 1:56

This question came from our site for professional and enthusiast programmers.

add comment

1 Answer 1

A few things to try:

  1. Make sure you are running Snort as root (or a user with permissions to drop into promiscuous mode.)

  2. Make sure your configuration is valid. (snort -t -c snort.conf I believe.)

  3. If all else fails ask on the forums at snort.org. They're helpful.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.