Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Snort-users] Sflowtool and Snort

from [melanie . te . laake] Network Security [Permanent Link]
Subject: [Snort-users] Sflowtool and Snort
Date: Tue, 15 Apr 2008 16:39:39 +0200 
Hi everyone,

I'm trying to use Snort 2.8.1 with sflowtool 3.12 but I get the following 
error:

sflowtool -t | snort -c /etc/snort/snort.conf -r -
        Error getting stat on pcap file: -: No such file or directory
        ERROR: Error getting pcaps
        Fatal Error, Quitting..

I've also tried to use named pipes with a fifo-file with the same result:
sflowtool -t > fifo.pcap
snort -c /etc/snort/snort.conf -r fifo.pcap
        Specified pcap is not a regular file: fifo.pcap
        ERROR: Error getting pcaps
        Fatal Error, Quitting..

Snort is working fine when it listens on eth0.
I've tested the following and it worked fine, too: 
sflowtool -t | tcpdump -r -

I would be pleased if you could help me!
Melanie
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Snort-users] Sflowtool and Snort, melanie . te . laake <=
Previous by Date:  Re: [Snort-users] preprocessor's rules?, Justin Heath
Next by Date:  [Snort-users] Errors compiling Snort 2.8.1 with IPv6 and Prelude support, Christopher Blume
Previous by Thread:  [Snort-users] preprocessor's rules???, Rachmat Hidayat Al-Anshar
Next by Thread:  [Snort-users] Errors compiling Snort 2.8.1 with IPv6 and Prelude support, Christopher Blume
Indexes:  [Date] [Thread] [Top] [All Lists]