Snort mailing list archives

RE: Snort Interfaces problem (Win32)


From: "Michael Steele" <michaels () silicondefense com>
Date: Mon, 24 Jun 2002 08:39:49 -0700

John,

It grabs the interfaces from the Registry, so your PPP interface will
still show up until you do a clean install.

-Michael
--
 Michael Steele | System Engineer / Support Technician
 mailto:michaels () silicondefense com
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org



-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of John Sage
Sent: Monday, June 24, 2002 8:06 AM
To: Paul J. Smith
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort Interfaces problem (Win32)

Window$ (as it is with so many things..) seems to be intent on calling
interfaces what it wants, and not being too helpful with letting *you*
know what it's calling them..

In a DOS box, try "windump -D" to see a list of all interfaces Window$
thinks it sees..

Refer to the different interfaces by number; tinker with the various
numbers presented on your snort command line, and use the one that
works. 

On my Win98 box, Window$ sees two instances of my NIC, for some
unknown reason, and still tries to refer to a ppp interface that
hasn't existed for years..

My Window$ snort command line:

full_path_to_snort.exe -dvv -i 3

So I'm pointing snort at interface "3"


- John
-- 
"You are in a little maze of twisty passages, all different."

PGP key      http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint  FE 97 0C 57 08 43 F3 EB 49 A1 0C D0 8E 0C D0 BE C8 38 CC B5




On Mon, Jun 24, 2002 at 01:07:01PM +0100, Paul J. Smith wrote:
Hi,

I downloaded the latest version of Snort for Windows from the
snort.org
site, but am unable to get it to recognize my interface.  Libpcap is
OK.
Windump etc can see the interfaces OK.  I did some searching on the
web
and found that it appears to be a known problem.  Something about
buffer
sizes and the new libpcap needing to be re-compiled into the binary. 

Anyway, I was wondering if anyone had a newer version of the binary
with
this mod that I could download?

Many thanks,

Paul Smith


8< snippage >8


-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: