From 26b7af1483fa27bbacd1d8f4dc911f337c557a1b Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Tue, 26 Mar 2013 18:24:46 +0100 Subject: [PATCH] Don't try to sniff 'default' interface Whan running suricata via 'suricata --af-packet', the list of interfaces was containing the 'default' interface and sniffing it was attempted. This was not wanted. --- src/util-device.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/util-device.c b/src/util-device.c index f5ace7da73..14459f0040 100644 --- a/src/util-device.c +++ b/src/util-device.c @@ -141,6 +141,8 @@ int LiveBuildDeviceList(char * runmode) ConfNode *subchild; TAILQ_FOREACH(subchild, &child->head, next) { if ((!strcmp(subchild->name, "interface"))) { + if (!strcmp(subchild->val, "default")) + break; SCLogInfo("Adding interface %s from config file", subchild->val); LiveRegisterDevice(subchild->val);