执行命令:
sudo snort -i eth0 -c /etc/snort/snort.conf -A fast -l /var/log/snort
Running in IDS mode
显示:
Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log
Verifying Preprocessor Configurations!
[ Port Based Pattern Matching Memory ]
[ Number of patterns truncated to 20 bytes: 0 ]
pcap DAQ configured to passive.
Acquiring network traffic from "eth0".
Reload thread starting...
Reload thread started, thread 0x7f8921685700 (82515)
ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device!
Fatal Error, Quitting..
错误原因:系统网卡名字不叫做eht0
解决方案:ifconfig -a查看自己的系统网卡叫什么
如图网卡名叫ens33