使用命令sudo snort -C snort.conf -A console -i eth0
运行snort (在数据包转储模式下)发生以下问题:
--== Initializing Snort ==--
Initializing Output Plugins!
Snort BPF option: snort.conf
pcap DAQ configured to passive.
The DAQ version does not support reload.
Acquiring network traffic from "eth0".
ERROR: Can't set DAQ BPF filter to 'snort.conf' (pcap_daq_set_filter: pcap_compile: syntax error)!
Fatal Error, Quitting..
有人能给我一个解决办法吗?
发布于 2018-11-17 16:29:55
只要把"-i“放在eth0前面,就能解决问题
https://stackoverflow.com/questions/22608833
复制相似问题