Re: Just starting with snort on XP

[Erek Adams <erek () snort org>]

On Thu, 27 Mar 2003, Barbara Pease wrote:

> I downloaded snort-1_9_1.exe archive from snort.org and unbundled it.  A
> directory  C:\Snort
> was created with several subdirectories: bin, etc, log, contrib, rules
> and doc and another executable called Uninstall.exe, suggesting its
> function.  ;-) I found snort.exe in the bin directory with
> LibnetNT.dll.  I ran the command prompt and cd C:\Snort then typed
> .\bin\snort.exe -v just to get started as described in the user
> documentation.  Running snort.exe always
> consistently produces an "Unable to Locate Component" error window
> stating that this application has failed to start because wpcap.dll was
> not found. Re-installing the application may fix this problem.
> Re-installing it did not make any difference. There is no such dll as
> wpcap.dll on my system.  Does this dll come with snort or does it come
> with something I need to run snort?  I am more familiar with Unix than
> Windows; unfortunately I must install snort on an XP laptop for my
> purposes.  I am also new to snort.

Google is your friend.  :)  Do a google on 'wpcap.dll'.  You'll see
"What's the difference between wpcap.dll and packet.dll".  Read thru that
link, and you'll find a reference to the download section [0] for Winpcap.

Now, to answer your real question:  Winpcap is a version of libpcap for
Win32 based systems.  It allows Snort to do it's snorting.  It has the
ability to read ehter frames off of the wire.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


[0]     http://winpcap.polito.it/install/default.htm


-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users