Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to learn network intrusion detection. When I try to launch Snort, in IDS mode, I get this message (I'm running Mac OS X):

Initializing Network Interface en1
ERROR: OpenPcap() FSM compilation failed: 
    syntax error
PCAP command: snort
Fatal Error, Quitting..

How can I fix this problem?

share|improve this question

migrated from stackoverflow.com Feb 26 '10 at 1:56

This question came from our site for professional and enthusiast programmers.

A few things to try:

  1. Make sure you are running Snort as root (or a user with permissions to drop into promiscuous mode.)

  2. Make sure your configuration is valid. (snort -t -c snort.conf I believe.)

  3. If all else fails ask on the forums at snort.org. They're helpful.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .