RE: Newbie: Snort on Win2K

["David Scott" <davidscott () mtgroup com>]

I get the same pcap error - don't know why. But my guess on why you aren't
seeing packets is because you aren't listening on the right interface.
Windows lists the NDISWan adapter as one of the available listening
interfaces, and often you won't get anything across it. Use the -W option to
list your available interfaces, then choose the appropriate one at startup
by using the -i parameter.

David Scott
Memphis Technology Associates
http://www.perimeteterdefenses.com

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
morrowd () rogers com
Sent: Monday, February 17, 2003 8:47 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Newbie: Snort on Win2K


Hello, I am a newbie to Snort.  Running on Win2k, WinPCap is installed and
working (Etherreal works fine so I know WinpCap is functioning).

When I run Snort, I see no packets.  Terminating Snort with Ctrl-C I see
this message;

pcap_loop: read error: PacketReceivePacket failed

Any help would be greatly appreciated.

1



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users