Re: Something is strange with the latest build

  • Having a similar problem, snort wont start because its trying to find to a non-existant interface…. details below:

    cat /var/etc/mpd_wan.conf

            new -i pppoe0 pppoeclient pppoeclient
            set iface route default
            set iface disable on-demand
            set iface idle 0
            set iface enable tcpmssfix
            set iface up-script /usr/local/sbin/ppp-linkup
            set iface down-script /usr/local/sbin/ppp-linkdown
            set bundle disable multilink
            set auth authname ""
            set auth password "0"
            set link keep-alive 10 60
            set link max-redial 0
            set link no acfcomp protocomp
            set link disable pap chap
            set link accept chap
                    set link mtu 1492
            set ipcp yes vjcomp
            set ipcp ranges
            set ipcp enable req-pri-dns
            set ipcp enable req-sec-dns

    cat /var/etc/mpd_wan.links

            set link type pppoe
            set pppoe iface le0
            set pppoe service ""
            set pppoe enable originate
            set pppoe disable incoming

    ifconfig -a

    le0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
            options=8 <vlan_mtu>ether 00:0c:29:57:1e:64
            inet6 fe80::20c:29ff:fe57:1e64%le0 prefixlen 64 scopeid 0x1
            media: Ethernet autoselect
            status: active
    le1: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
            options=8 <vlan_mtu>ether 00:0c:29:57:1e:6e
            inet netmask 0xffffff00 broadcast
            inet6 fe80::20c:29ff:fe57:1e6e%le1 prefixlen 64 scopeid 0x2
            media: Ethernet autoselect
            status: active
    plip0: flags=108810 <pointopoint,simplex,multicast,needsgiant>metric 0 mtu 1500
    pfsync0: flags=41 <up,running>metric 0 mtu 1460
            pfsync: syncdev: lo0 syncpeer: maxupd: 128
    lo0: flags=8049 <up,loopback,running,multicast>metric 0 mtu 16384
            inet netmask 0xff000000
            inet6 ::1 prefixlen 128
            inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
    enc0: flags=0<> metric 0 mtu 1536
    pflog0: flags=100 <promisc>metric 0 mtu 33204
    pppoe0: flags=88d1 <up,pointopoint,running,noarp,simplex,multicast>metric 0 mtu 1492
            inet6 fe80::20c:29ff:fe57:1e64%pppoe0 prefixlen 64 scopeid 0x8
            inet --> netmask 0xffffffff

    Snort error:

    Initializing Network Interface ng0
    ERROR: OpenPcap() device ng0 open:
            BIOCSETIF: ng0: Device not configured
    Fatal Error, Quitting..

    Im currently running snort 1.3/2.0 alpha, however i had this problem on 1.2 RC2...</up,pointopoint,running,noarp,simplex,multicast></promisc></up,loopback,running,multicast></up,running></pointopoint,simplex,multicast,needsgiant></vlan_mtu></up,broadcast,running,simplex,multicast></vlan_mtu></up,broadcast,running,simplex,multicast>

Log in to reply