Snort mailing list archives

Re: Win32 Users Survey


From: Rob Dixon <rob.l.dixon () gmail com>
Date: Wed, 5 May 2010 19:34:26 -0400

what version of winsnort and winpcap?



On Wed, May 5, 2010 at 5:28 PM, Steven Sturges <steve.sturges () sourcefire com
wrote:

For those using Snort on windows platforms, how do you
specify the interface on which to sniff packets?

With Snort on windows, you can use the -W command line
option to query the list of interfaces and then there are
options for starting Snort.

Using -i with the interface number (index) from the -W output

-i <num>

OR using -i with the device name

-i \Device\NPF_<uuid>

OR

No -i on command line and let Snort select the first interface
that WinPcap finds.

Thanks.
-steve



------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
304Geeks.com Founder
Hackers for Charity Board Member
GPEN, GAWN, C|HFI, ESSE-D, SnortCP, TNAP, TNCP, TECP, A+, whatever..

lol >> rofl.log
------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: