Snort mailing list archives

Re: Snort DAQ


From: Y M <snort () outlook com>
Date: Mon, 1 Jul 2013 16:41:23 +0000

The interface snort will be using for sniffing is not specified in the command.
 
From: DMCLEO11 () caledonian ac uk
To: snort-users () lists sourceforge net
Date: Wed, 26 Jun 2013 09:32:17 +0000
Subject: [Snort-users] Snort DAQ







Hi snort-users, Iam trying to run Snort on windowsXP for  experiments and tests and the config runs ok in test mode but 
when I use the following for IDSmode ,

snort -c C:\snort\etc\snort.conf -l C:\snort\log



I get the screenshot error please see attach,can anyone help?

ERROR:cant start DAQ (-1) 

the DAQ version does not support reload?

I'am new to snort and only want to use Snort in IDS mode to try and detect shell code on the snort computer



Best regards DON





------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!                                        
  
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: