Snort mailing list archives

Packet Capturing


From: Nanda Vardhan <nandu7ninja () gmail com>
Date: Sun, 23 Mar 2014 20:05:41 +0530

I am a newbie of Snort IDS. I installed Snort 2.9.6.0 on ubuntu. I want to
sniff packets from all the devices connected to wifi router and get alerts
based on some rules I defined. I manually setup NIC to promiscuous mode. My
problem is that I cannot sniff packets of other devices. Am getting packet
information of only laptop on which Snort is running.

I used following command:

$ sudo snort -c  snort.conf -A console -i wlan0

Output:
           Preprocessor Object: SF_DNP3  Version 1.1  <Build 1>
           Preprocessor Object: SF_IMAP  Version 1.0  <Build 1>
           Preprocessor Object: SF_SIP  Version 1.1  <Build 1>
           Preprocessor Object: SF_DNS  Version 1.1  <Build 4>
           Preprocessor Object: SF_SSLPP  Version 1.1  <Build 4>
Commencing packet processing (pid=3312)
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: