RE: RE: Installing SNORT 1.8.3 on win2k server

[C.Prickaerts () UB unimaas nl]

Hi YP,

I had the same problem. Two things:

First my nic was number 2, so snort line should be: 
c:\snort\snort.exe -h 192.168.30.0/24 -i 2 

Check out what number your lan  card has.

Also, First I installed in the default dir, but it seems the snort engine
cannot handle spaces in the config file when it comes to directory
locations. You'll see this by running snort in a cmd box, instead of via the
IDS gui.

Try installing to c:\ (which would result in c:\snort), adjust script so
that rules scripts are properly cited and see what happens.

Regards,

Chris

-----Original Message-----
From: Michael Steele
To: 'Y P Chien'
Cc: snort-users () lists sourceforge net
Sent: 3/12/02 3:56 AM
Subject: [Snort-users] RE: Installing SNORT 1.8.3 on win2k server

YP,

 

This is an installation from Sourcefire. You might want to contact Marty
and find out why?  I would be more then happy to help you if you were
using the installation documentation written by me located on our
website as I have never installed the Sourcefire installation. It's
usually a problem with WinPcap. You might try going back one version
(2.2 Non Beta). 

- Mike

Commercial Snort Support <<->> 1.866.41.SNORT
Silicon Defense -- <www.silicondefense.com>
Home of the new SENTRUS Snort sensor!
Michael Steele - Snort Support Technician

-----Original Message-----
From: Y P Chien [mailto:ypchien () ssi com] 
Sent: Monday, March 11, 2002 4:30 PM
To: michaels () silicondefense com
Subject: Installing SNORT 1.8.3 on win2k server

 

Dear Sir: 

I saw your email address and post replies on Snort discussion forum. 

It seems that I have the similar problems that most users have with
installing Snort on Win2K system. 

I am trying to install Snort on a Win2K server with SP2.  I am using
WinPcap 2.3 beta.  I am getting the following errors:

Initializing Network Interface \ 
ERROR: OpenPcap() FSM compilation failed: 
        syntax error 
PCAP command: Files\Sourcefire\Snort\snort.conf -l C:\Program
Files\Sourcefire\Snort -A full -h any 
Fatal Error, Quitting.. 

Please help. 

YP 


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users