Get your server issues fixed by our experts for a price starting at just 25 USD/Hour. Click here to register and open a ticket with us now!

Author Topic: FATAL ERROR: Cannot decode data link type 113  (Read 8136 times)

0 Members and 1 Guest are viewing this topic.

arunlalpr

  • Newbie
  • *
  • Posts: 14
  • Karma: +0/-0
FATAL ERROR: Cannot decode data link type 113
« on: November 29, 2018, 02:37:00 am »
When the interface is not eth0. We need to alter the installation snort configuration.


Error:

--------------------------------------
#snort -A console -q -u snort -g snort -c /etc/snort/snort.conf -i venet0
FATAL ERROR: Cannot decode data link type 113

--------------------------------------
We need skip the decoders by using "--enable-non-ether-decoders" during configuration will solve the issue.

--------------------------------------------
cd ~/snort_src
wget https://snort.org/downloads/snort/snort-2.9.8.0.tar.gz
tar -xvzf snort-2.9.8.0.tar.gz
cd snort-2.9.8.0
./configure --enable-sourcefire --enable-non-ether-decoders
make
sudo make install
----------------------------------------------

That it :)