Snort network instruction Mac OS X

Posted by Rasatavohary on Super User See other posts from Super User or by Rasatavohary
Published on 2010-02-25T22:27:35Z Indexed on 2010/03/27 16:13 UTC
Read the original article Hit count: 601

Filed under:

osx

|

snort

|

intrusion-detection

|

networking

|

security

I'm trying to learn network intrusion detection. When I try to launch Snort, in IDS mode, I get this message (I'm running Mac OS X):

Initializing Network Interface en1
ERROR: OpenPcap() FSM compilation failed: 
    syntax error
PCAP command: snort
Fatal Error, Quitting..

How can I fix this problem?

© Super User or respective owner

Related posts about osx

OSX/Wine - Associating file extension (.php) with a Windows program on OSX

as seen on Super User - Search for 'Super User'
Greetings, I am running PSPad (a Windows programming editor) on OSX/Snow Leopard using Wine 1.1.35 I want to associate various file extensions (.php, .js, .html) with PSPad.exe OSX Finder does not allow this association -- I can only associate file types with $.app items in Applications. How do… >>> More
osx web service spawns icon in taskbar - osx - while drawing image

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a web endpoint that displays an image of a string... When the following code is run (in tomcat) it spawns a java icon in the taskbar on OSX. Not sure if it is a problem, or whats going on. Looking for some sort of explination @RequestMapping("/text/{text}") public void textImage(HttpServletResponse… >>> More
Cannot disable spotlight indexing on volume

as seen on Super User - Search for 'Super User'
I have a FAT32 partition on my HDD. When using OSX, it is mounted to /Volumes/MEDIA. After a recent upgrade to Mavericks, spotlight is having trouble indexing it, eating up almost all of my system resources, and I cannot get the indexing to stop: [jay-mba-osx ~]% sudo mdutil -v -a -i off /: Indexing… >>> More
OSX - User home directories shared via NFS

as seen on Super User - Search for 'Super User'
Hi, I've run into some problems with how I've got user home directories set up on our system here. Our server is an XServe, using Open Directory to manage the user accounts. The majority of our workstations are OSX, but there are a few running Linux (Centos 5.3), and, as time goes on, we expect… >>> More
Can't connect to local IP address on OSX

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to connect to a webserver that's running on my mac OSX 1.6. I'm able to connect to it locally using http://127.0.0.1:8888/myapp but when I attempt to connect to it using my machine's local IP address (http://192.168.1.15:8888/myapp IP shown below) from the same machine (or another on the… >>> More

Related posts about snort

Snort: not logging anything

as seen on Server Fault - Search for 'Server Fault'
My site seems to be the target of quite a bit of probing over the last few months. In an attempt to get a better handle on this I installed SNORT on one of the machines that has external exposure. Something must not be installed correctly as I see lots of probing in /var/log/messages but snort isn't… >>> More
Snort/Barnyard2 Logging

as seen on Server Fault - Search for 'Server Fault'
I need some help with my Snort/Barnyard2 setup. My goal is to have Snort send unified2 logs to Barnyard2 and then have Barnyard2 send the data to other locations. Here is my currrent setup. OS Scientific Linux 6 Snort Version 2.9.2.3 Barnyard2 Version 2.1.9 Snort command snort -c /etc/snort/snort… >>> More
snort analysis of wireshark capture

as seen on Server Fault - Search for 'Server Fault'
I'm trying to identify trouble users on our network. ntop identifies high traffic and high connection users, but malware doesn't always need high bandwidth to really mess things up. So I am trying to do offline analysis with snort (don't want to burden the router with inline analysis of 20 Mbps… >>> More
Snort's problems in generating alert from Darpa 1998 intrusion detection dataset.

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi. I’m working on DARPA 1998 intrusion detection dataset. When I run snort on this dataset (outside.tcpdump file), snort don’t generate complete list of alerts. It means snort start from last few hours of tcpdump file and generate alerts about this section of file and all of packets in first hours… >>> More
Snort network instruction Mac OS X

as seen on Super User - Search for 'Super User'
I'm trying to learn network intrusion detection. When I try to launch Snort, in IDS mode, I get this message (I'm running Mac OS X): Initializing Network Interface en1 ERROR: OpenPcap() FSM compilation failed: syntax error PCAP command: snort Fatal Error, Quitting.. How can I fix this problem… >>> More