Snort mailing list archives
RE: Snort and Win32
From: "L. Christopher Luther" <CLuther () Xybernaut com>
Date: Wed, 8 Jan 2003 13:56:51 -0500
The problem is not with Snort; it's with WinPCap. Specifically, all versions of WinPCap after 2.02 disable themselves with they detect a SMP platform (see http://winpcap.polito.it/misc/faq.htm#Q-15). I too had this problem on a dual-PIII, and I reverted to using Snort 1.8.6 and WinPCap 2.02. Though WinPCap does not officially support SMP platforms, at least this version of WinPCap does not disable itself. Christopher -----Original Message----- From: "Incidents" <Incidents () attbi com> To: <snort-users () lists sourceforge net> Date: Wed, 8 Jan 2003 00:33:51 -0800 Subject: [Snort-users] Snort and Win32 Hello All, I've installed snort 1.9 on a Windows 2000 Advanced Server box running dual-PIII. I've also installed IDS Center. I went through the config sections and set it up with no errors. When I click on the test button I receive the following error: |> IDScenter test console <| Initializing Output Plugins! Log directory = E:\Snort\Log Initializing Network Interface ERROR: OpenPcap() device open: Error opening adapter: Overlapped I/O operation is in progress. Fatal Error, Quitting.. I installed the WinPcap latest version 3.04? (I think). Looking through the archives, the best answer I found was that snort cannot run on multiple processor machines. Is this correct? Any other thoughts? Regards, Incidents
Current thread:
- Snort and Win32 Incidents (Jan 08)
- Re: Snort and Win32 Erek Adams (Jan 08)
- RE: Snort and Win32 Incidents (Jan 08)
- RE: Snort and Win32 Erek Adams (Jan 08)
- RE: Snort and Win32 Michael Steele (Jan 08)
- RE: Snort and Win32 Don Weber (Jan 08)
- RE: Snort and Win32 Incidents (Jan 08)
- <Possible follow-ups>
- RE: Snort and Win32 L. Christopher Luther (Jan 08)
- RE: Snort and Win32 L. Christopher Luther (Jan 09)
- Re: Snort and Win32 Erek Adams (Jan 08)