Snort mailing list archives

Re: win32 ipv6


From: Todd Wease <twease () sourcefire com>
Date: Wed, 18 Feb 2009 10:01:43 -0500

Hi Jason,

An IPv6 capable binary for Windows (selectable via the installer) will
be available in the final release of Snort 2.8.4.

Todd


Jason Tomforde wrote:

Hello,

 

I would like to run snort on Windows XP with IPv6 enabled.  I
downloaded the latest win32 installer (Snort_2_8_3_2_Installer).  I
added an ‘ipvar’ to the snort.conf file but it is not recognized when
the application is executed.  The output is as follows:

 

Running in IDS mode

 

        --== Initializing Snort ==--

Initializing Output Plugins!

Var '_ADDRESS' redefined

Initializing Preprocessors!

Initializing Plug-ins!

Parsing Rules file c:\Program Files\Snort\etc\snort.conf

ERROR: c:\Program Files\Snort\etc\snort.conf(27) => Unknown rule type:
ipvar

Fatal Error, Quitting..

 

I attempted to build the latest win32 executable using the
snort___Win32_MySQL_IPv6_Release build configuration.  It built fine,
however, when I run the executable I get the following:

 

C:\Workspace\snort-2.8.3.2\src\win32\WIN32-Prj\snort___Win32_MySQL_IPv6_Release>snort
-i3 -dev

Running in packet dump mode

 

        --== Initializing Snort ==--

Initializing Output Plugins!

ERROR: (null)(0) The following is not allowed: 0.0.0.0/0.0.0.0

Fatal Error, Quitting..

 

Please let me know if there is an available win32 binary with IPv6
enabled OR provide some insight on how to build it with it enabled.

 

Thank You.

 

 

Jason Tomforde

Software Engineer

mZeal Communications

166 Boulder Dr, Suite 108

Fitchburg, MA 01420

Tel. (978)665-0280 ext 118

Fax (978)665-0286

jtomforde () mzeal com <mailto:jtomforde () mzeal com>

 

CONFIDENTIALITY NOTICE: This e-mail message, including any
attachments, is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not
the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message.

------------------------------------------------------------------------

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: