Re: Stuck at Commencing Packet Processing

["Michael Steele" <michaels () winsnort com>]

It appears the NIC at location 1 has been disabled. If promiscuous mode (Stealth) is being attempted, there is more to 
it than just removing the IP address.

 

http://www.winsnort.com/topic/30-how-to-set-promiscuous-stealth-mode/

 

Best regards,

Michael...

 

WINSNORT.com Management…

--

******************** Established ~ 2002 **********************

* FREE Windows Intrusion Detection System (WinIDS) Tutorials *

*            ~~ FREE Windows Support Forums ~~               *

*               Visit @  <http://winsnort.com/> http://winsnort.com                  *

*     Snort: Open Source Network IDS -  <http://snort.org/> http://snort.org      *

**************************************************************

 

From: Lena Okanovic [mailto:lokanovic () flightapps com] 
Sent: Monday, February 16, 2015 2:04 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Stuck at Commencing Packet Processing

 

​Hello,

I am new to Snort. I just recently downloaded and installed it on Windows 2008 box. I got the WinPcap and rules 
installed per instructions found on the internet. I also configured the snort.conf file to use Snort as IDS. Testing 
results come back without any errors. However, when I execute snort.exe -i1 -s -l C:\snort\log\ -c 
C:\Snort\etc\snort.conf I get no log created and the cmd prompt is stuck at Commencing Packet Processing



 

I also chose Interface 1 because of my configuration. 1 and 2 have no IP and 3 is my management interface with IP 
settings assigned.



 

What am I doing wrong? Oh, also, in the config file I left 'any' for the HOME_NET address.

 

Thank you!

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!