Snort mailing list archives

Stopped at "using PCAP_FRAME"+DaemonMode can't be identified+Data can't be saved.


From: jiangzhw2008 <jiangzhw2008 () yeah net>
Date: Thu, 12 Feb 2009 16:56:50 +0800 (CST)

Dear all,

I am a newbie working for a IDS papers these days and encountered some problems seeking help.^_^
1.some instruction said that if run
"snort.exe -l c:\snort\log -c c:\snort\etc\snort.conf -A console "
you  should get a lot of infoscrolling by.I've installed the rules,however ,
when i run such command:
the information shown on the console stopped at the sentence at:
using PACP_FRMAES=65535
is it OK?
2.the option -D is recongized as invalid ,but i find the paragragh below in the readme under C:\Snort\doc
-D      Run Snort in daemon mode.  Alerts are sent to
            /var/log/snort/alert unless otherwise specified.
3.when i ran such command
snort -c "c:\snort\etc\snort.conf" -l "c:\snort\log" -deX
the data in mysql database and ACID reamained unchanged.

Best regards!
  Jiangzhw
 
------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: