Snort mailing list archives
Re: Snort-2.9.6.0 Packet Capturing
From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Fri, 21 Mar 2014 12:58:38 +0000
You can’t sniff packets of other devices? Well, no, you can’t do that. You need to sniff from the device the traffic is actually on. -- Joel Esler Open Source Manager Threat Intelligence Team Lead Vulnerability Research Team On Mar 21, 2014, at 6:45 AM, Nanda Vardhan <nandu7ninja () gmail com<mailto:nandu7ninja () gmail com>> wrote: I am a newbie of Snort IDS. I installed Snort 2.9.6.0 on ubuntu. I want to sniff packets from all the devices connected to wifi router and get alerts based on some rules I defined. I manually setup NIC to promiscuous mode. My problem is that I cannot sniff packets of other devices. Am getting packet information of only laptop on which Snort is running. I used following command: $ sudo snort -c snort.conf -A console -i wlan0 Output: Preprocessor Object: SF_DNP3 Version 1.1 <Build 1> Preprocessor Object: SF_IMAP Version 1.0 <Build 1> Preprocessor Object: SF_SIP Version 1.1 <Build 1> Preprocessor Object: SF_DNS Version 1.1 <Build 4> Preprocessor Object: SF_SSLPP Version 1.1 <Build 4> Commencing packet processing (pid=3312) ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/13534_NeoTech_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/13534_NeoTech
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort-2.9.6.0 Packet Capturing Nanda Vardhan (Mar 21)
- Re: Snort-2.9.6.0 Packet Capturing Joel Esler (jesler) (Mar 21)
- Re: Snort-2.9.6.0 Packet Capturing Nanda Vardhan (Mar 22)
- Re: Snort-2.9.6.0 Packet Capturing praveen_recker . (Mar 22)
- Re: Snort-2.9.6.0 Packet Capturing Tony Robinson (Mar 22)
- Re: Snort-2.9.6.0 Packet Capturing Anacleto Junior (Mar 23)
- Re: Snort-2.9.6.0 Packet Capturing praveen_recker . (Mar 23)
- Re: Snort-2.9.6.0 Packet Capturing Nanda Vardhan (Mar 22)
- Snort-2.9.6.0 Packet Capturing Nanda Vardhan (Mar 22)
- Re: Snort-2.9.6.0 Packet Capturing Y M (Mar 26)
- Re: Snort-2.9.6.0 Packet Capturing Joel Esler (jesler) (Mar 21)