LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 05-21-2018, 03:45 PM   #1
TBotNik
Member
 
Registered: May 2016
Location: Greenville, TX
Distribution: Kubuntu 18.04
Posts: 796

Rep: Reputation: Disabled
Snort Q!


All,

Not sure it this Snort issue belongs here in "Networking" or in "Security"!

Anyway installed Snort! I'm always on wifi, so only "wlan0" active. Snort keeps erroring as it is always only looking for wired network or eth0.

How do I config Snort to recognize the active connection, instead of defaulting only to eth0?

Everytime I run any install these Snort errors keep popping up!

All help appreciated!

Cheers!

TBNK
 
Old 05-21-2018, 08:48 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,323
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
What distro/version are you using? Your user agent icon says Ubuntu, but many Ubuntu derivatives report as Ubuntu and you may be using snort on a different machine.

What is the exact wording of the error messages and of the command,

Code:
ifconfig -a
You may have to issue that command as root.

Please surround any terminal output with "code" tags, which become available when you click the "Go Advanced" button beneath the compose post window.
 
Old 05-22-2018, 05:13 PM   #3
TBotNik
Member
 
Registered: May 2016
Location: Greenville, TX
Distribution: Kubuntu 18.04
Posts: 796

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by frankbell View Post
What distro/version are you using? Your user agent icon says Ubuntu, but many Ubuntu derivatives report as Ubuntu and you may be using snort on a different machine.

What is the exact wording of the error messages and of the command,

Code:
ifconfig -a
You may have to issue that command as root.

Please surround any terminal output with "code" tags, which become available when you click the "Go Advanced" button beneath the compose post window.
frankbell,

Kubuntu 16.04 LTS on Acer Aspire 7739Z laptop:
[CODE]
ifconfig -a
enp3s0 Link encap:Ethernet HWaddr 00:1f:c6:9f:c4:e4
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:80179 errors:0 dropped:0 overruns:0 frame:0
TX packets:80179 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:9296372 (9.2 MB) TX bytes:9296372 (9.2 MB)

wlp2s0 Link encap:Ethernet HWaddr 78:92:9c:25:b5:d0
inet addr:192.168.0.119 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::4c66:d3a3:2311:6776/64 Scope:Link
inet6 addr: 2605:6000:8e0a:4e00:b93a:229:bb1e:70ad/64 Scope:Global
inet6 addr: 2605:6000:8e0a:4e00:6881:c73e:ce9f:ebb7/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:745966 errors:0 dropped:0 overruns:0 frame:0
TX packets:383529 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:865902492 (865.9 MB) TX bytes:55883717 (55.8 MB)
{/CODE]

Wow did not know it what changing all the interface definitions! Have just upgraded from 14.04 and not really happy with 16.04, because it's no longer developer friendly and the processing priorities are totally screwed.

Cheers!

TBNK
 
Old 05-03-2020, 11:33 AM   #4
TBotNik
Member
 
Registered: May 2016
Location: Greenville, TX
Distribution: Kubuntu 18.04
Posts: 796

Original Poster
Rep: Reputation: Disabled
Followup

All,

Following up on all my open threads, looking to close/solve them all.

Cheers!

TBNK
 
Old 05-03-2020, 03:17 PM   #5
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,727

Rep: Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211
Quote:
Originally Posted by TBotNik View Post
All,

Following up on all my open threads, looking to close/solve them all.

Cheers!

TBNK
My opinion: these “follow up posts” do not comply with LQ rules as they don’t add to the technical discussion(s)
If you want to mark your threads solved, use the thread tools. All you’re doing is cluttering the fora.
(Maybe you just trying to add to your post count?)

Last edited by scasey; 05-03-2020 at 08:13 PM.
 
Old 05-06-2020, 04:44 AM   #6
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by scasey View Post
(Maybe you just trying to add to your post count?)
Might be part of the reason, but I suspect something simpler: they're hoping to get other people to do their work for them. Don't care that they're spamming LQ and are making it a slightly less useful place.
Reading through their threads that assessment is well deserved: there's a general attitude of "Gimme or GTFO". And as soon as they get it (or it's obvious that they won't), they're gone.
Reported, again. There's two dozen identical posts by now, and much more similarly pointless bumping.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Snort - Snort Report - mysql_pconnect() - errors mwx Linux - Software 1 02-10-2013 08:44 AM
1-snort Vs ntop-- 2- snort perfstat.exec PoleStar Linux - Newbie 1 09-06-2010 01:52 PM
[HELP]SNORT PROBLEMS(IDS)-service snort start JayCool Linux - Software 5 03-15-2009 12:34 PM
Snort - no portscan and tcp alerts in snort av.dubey Linux - Software 6 07-11-2008 09:56 PM
Error when starting up snort: bash:!/bin/sh/usr/local/bin/snort :Eent not found cynthia_thomas Linux - Software 1 11-11-2005 02:59 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:49 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration