Snort mailing list archives
RE: Snort for WIndows newbie question...
From: "Ambrose, Joseph" <Joe.Ambrose () conference-board org>
Date: Wed, 28 Apr 2004 08:42:27 -0400
Thanks Matt! It works now.... Now all I have to do is convert the text files to allow notepad to read them..... Joseph Ambrose, MCSE System and Network Manager The Conference Board P: 001-212-339-0443 F: 001-212-836-3802 E: Joe.Ambrose () conference-board org Visit our Award Winning Web Site: www.conference-board.org -----Original Message----- From: Matt Kettler [mailto:mkettler () evi-inc com] Sent: Monday, April 26, 2004 4:44 PM To: Ambrose, Joseph; Sort List (E-mail) Subject: Re: [Snort-users] Snort for WIndows newbie question... At 10:13 AM 4/26/2004, Ambrose, Joseph wrote:
"The procedure entry point PacketGetNetInfo could not be located in the dynamic link library Packet.dll. I thought I installed Snort correctly, however.....
After experiencing this myself, it appears that it's a winpcap version problem. If you go to the source of winpcap: http://winpcap.polito.it/install/default.htm Winpcap 3.0 works, but Winpcap 3.1-beta does not. Also note that you have to un-install 3.1 in order to successfully downgrade winpcap. You can verify the re-install worked by locating packet.dll in your system32 directory and doing a right-click properties. The version tab will give you the version number of packet.dll and you should see it change after you're done. For reference, my working version of the dll is reported as 3.0.0.18 by windows. This may not be the only working version, but it is one that works for me with snort 2.1.2. ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id149&alloc_id66&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort for WIndows newbie question... Ambrose, Joseph (Apr 26)
- Message not available
- Re: Snort for WIndows newbie question... Matt Kettler (Apr 26)
- Message not available
- <Possible follow-ups>
- RE: Snort for WIndows newbie question... Ambrose, Joseph (Apr 26)
- RE: Snort for WIndows newbie question... Ambrose, Joseph (Apr 28)
- RE: Snort for WIndows newbie question... Michael Steele (Apr 28)
- RE: Snort for WIndows newbie question... Matt Kettler (Apr 28)
- RE: Snort for WIndows newbie question... Michael Steele (Apr 28)
- RE: Snort for WIndows newbie question... Romulo M. Cholewa (Apr 28)