Snort mailing list archives
running Snort on W2000:"interface \Device\Packet_NdisWanIp" problem
From: Matija Exel <Matija.Exel () lag ensieg inpg fr>
Date: Fri, 16 Nov 2001 17:05:32 +0100
hello, I cannot get started with Snort! I am on a Windows2000. There are no messages from the beast: C:\Program Files\Sourcefire\Snort-1.8.2>snort -v Log directory = log --== Initializing Snort ==-- Initializing Network Interface \ Checking PID path...PID stat checked out ok, PID set to C:\Program Files\Sourcefire\Snort-1.8.2
Writing PID file to "C:\Program Files\Sourcefire\Snort-1.8.2" Decoding Ethernet on interface \Device\Packet_NdisWanIp ... and then nothing!I wonder where is this interface information coming from: " interface \Device\Packet_NdisWanIp " ? I am at the same time running successfuly Ethereal from the same box -- however I
have the choice of 2 interfaces there: -- if I choose \Device\Packet_NdisWanIp I get nothing, as with snort -- if I choose \Device\Packet_{452B97B2-...} Ethereal runs OK. Is there any way of configuring this? I don't see anything in snort.conf. ____________________________________________________ M. Matija Exel E.N.S.I.E.G., Service RĂ©seau / Lab. Automatique de Grenoble BP. 46 Cedex, 38402 St.Martin d'Heres, FRANCE Tel : (+33) 4 76 82 71 12 Fax:(+33) 4 76 82 63 88 Matija.Exel () inpg fr, Matija.Exel () lag ensieg inpg fr http://www-exel.ensieg.inpg.fr/
Current thread:
- running Snort on W2000:"interface \Device\Packet_NdisWanIp" problem Matija Exel (Nov 16)
- RE: running Snort on W2000:"interface \Device\Packet_NdisWanIp" problem Michael Steele (Nov 16)