[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    Re: [Snort-users] No network interfaces after install Version 3.0.0 on Ubuntu 18
From:       "Nihal Desai \(nihdesai\) via Snort-users" <snort-users () lists ! snort ! org>
Date:       2018-11-20 4:17:26
Message-ID: 87BD2254-20C1-4CBD-AB2C-A6F5E7DCCF3B () cisco ! com
[Download RAW message or body]

[Attachment #2 (text/plain)]

Hi Jaime,

Thank you for reaching out.

Have you tried to run this command with root privilege?

Thanks

--
V/r
Nihal N. Desai

From: Snort-users <snort-users-bounces@lists.snort.org> on behalf of Jaime González \
                via Snort-users <snort-users@lists.snort.org>
Reply-To: Jaime González <jaimeglz1952@gmail.com>
Date: Monday, November 19, 2018 at 9:57 PM
To: "snort-users@lists.snort.org" <snort-users@lists.snort.org>
Subject: [Snort-users] No network interfaces after install Version 3.0.0 on Ubuntu 18

Dear all,

I just installed Snort 3 on an Asus X555LA running Ubuntu 18.04.1, with all the \
latest updates. I tried to carefully follow the instructions in Noah Dietrich's Snort \
3 on Ubuntu 14, 16, & 18.

snort -V works OK, and recognizes "Using DAQ version 2.2.2".

However, when I run snort -W, all interfaces appear as "disabled". (Mi internet \
connection is working OK.)

snort -i wlan0 returns the following:

o")~   Snort++ 3.0.0-249
--------------------------------------------------
--------------------------------------------------
pcap DAQ configured to passive.
Commencing packet processing
++ [0] wlan0
Can't start DAQ (-1) - socket: Operation not permitted
Analyzer: Failed to start DAQ instance
Segmentation fault (core dumped)

Same with snort -i eth0

Any help will be appreciated.


[Attachment #3 (text/html)]

<html xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi Jaime,<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Thank you for reaching out.<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Have you tried to run this command with root \
privilege?<o:p></o:p></p> <p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Thanks<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class="MsoNormal"><span \
style="font-size:10.5pt;color:black">--&nbsp;<o:p></o:p></span></p> <div>
<p class="MsoNormal"><span \
style="font-size:10.5pt;color:black">V/r<o:p></o:p></span></p> </div>
</div>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">Nihal N. \
Desai</span><o:p></o:p></p> <p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: \
</span></b><span style="font-size:12.0pt;color:black">Snort-users \
&lt;snort-users-bounces@lists.snort.org&gt; on behalf of Jaime González via \
Snort-users &lt;snort-users@lists.snort.org&gt;<br> <b>Reply-To: </b>Jaime González \
&lt;jaimeglz1952@gmail.com&gt;<br> <b>Date: </b>Monday, November 19, 2018 at 9:57 \
PM<br> <b>To: </b>&quot;snort-users@lists.snort.org&quot; \
&lt;snort-users@lists.snort.org&gt;<br> <b>Subject: </b>[Snort-users] No network \
interfaces after install Version 3.0.0 on Ubuntu 18<o:p></o:p></span></p> </div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Dear all,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">I just installed Snort 3 on an Asus X555LA running Ubuntu \
18.04.1, with all the latest updates. I tried to carefully follow the instructions in \
Noah Dietrich's Snort 3 on Ubuntu 14, 16, &amp; 18.&nbsp;&nbsp;&nbsp; <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">snort -V works OK, and recognizes &quot;Using DAQ version \
2.2.2&quot;. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">However, when I run snort -W, all interfaces appear as \
&quot;disabled&quot;. (Mi internet connection is working OK.) <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">snort -i wlan0 returns the following:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">o&quot;)~&nbsp;&nbsp; Snort&#43;&#43; 3.0.0-249<br>
--------------------------------------------------<br>
--------------------------------------------------<br>
pcap DAQ configured to passive.<br>
Commencing packet processing<br>
&#43;&#43; [0] wlan0<br>
Can't start DAQ (-1) - socket: Operation not permitted<br>
Analyzer: Failed to start DAQ instance<br>
Segmentation fault (core dumped)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">Same with snort -i eth0<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">Any help will be appreciated.<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>



_______________________________________________
Snort-users mailing list
Snort-users@lists.snort.org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	snort-users-leave@lists.snort.org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

--===============8630270725740735792==--

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic