Problem getting snort to run on 11.0 workstation

[William Pribble]

When I try to run snort 1.8.1 I get the following errors.

ovserv|root:/opt/snort/bin # ./snort -h 10.64.162.0/24 -d -v host 10.64.162.5
Log directory =

--== Initializing Snort ==--

Initializing Network Interface lan0
ERROR: OpenPcap() device lan0 open:
can't find PPA for /dev/lan0
Fatal Error, Quitting..

Any help would be appreciated.

[Uday_S_Ankolekar]

Hi,

http://www.ethereal.com/lists/ethereal-cvs/200104/msg00084.html
The above link might help you..

-USA...

[T G Manikandan]

Hello,
/*
HP-UX 10.20 and 11.X can use tcpdump/libpcap as found at
ftp://ftp.ee.lbl.gov./ To select the interface to trace, one uses the -i
option and gives the interface name as "/dev/dlpiN" where N is the PPA
of the device. One uses lanscan to find PPAs. On 10.20, the PPA happens
to be the same as the Network Management ID (NMID) and is not the same
as the N in "lanN." On 11.X, the PPA happens to be the same as the Card
Instance number and happens to be the same as the N in "lanN." The
/dev/dlpiN specified to tcpdump/libpcap is not the same as the device
file /dev/dlpiM. What actually happens is tcpdump/libcap opens /dev/dlpi
and bind to PPA N. The /dev/dlpiM device files are for other uses.
*/