Snort mailing list archives
Re: How to start and monitor packets on windows
From: "info+lucretia.ca" <info () lucretia ca>
Date: Thu, 20 Jul 2006 07:56:41 -0600
if i try to run sonrt from command line on bin directorywith snort -v-i1 it will be start but i can not see any packetstransaction when iam browsing any site.Then either interface "-i1" is incorrect, or, the sniffing interface is attached to an ethernet switch that is masking the data from you. If you are using a switch, you'll either need to replace it with a hub, purchase a "tap", or change your network somehow to see the traffic of interest.
For windows you may wish to verify that the network device is listed as 1. Typically, since snort 2.3, '-i2' is required for the ethernet device as '1' generally is the dialup device (ppp). Also IDScenter is not recommended. Cheers, James Friesen, CIO Lucretia Enterprises Our World Is Here info at lucretia dot ca http://lucretia.ca ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to start and monitor packets on windows VINAY_SHARMA (Jul 20)
- Re: How to start and monitor packets on windows Rich Adamson (Jul 20)
- Re: How to start and monitor packets on windows Joel Esler (Jul 20)
- Re: How to start and monitor packets on windows info+lucretia.ca (Jul 20)
- Re: How to start and monitor packets on windows Jeff Dell (Jul 20)
- <Possible follow-ups>
- Re: How to start and monitor packets on windows Klein, Jeremie (Jul 20)
- Re: How to start and monitor packets on windows VINAY_SHARMA (Jul 20)
- Re: How to start and monitor packets on windows Rich Adamson (Jul 20)