Snort Forums Archive

Archive Home » Windows » Snort not listening on Ethernet interface

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort not listening on Ethernet interface

Posted by NuttySquirrel on March 16, 2006 04:55:49

I am a totally new to Snort and need some help.

When I run the command

C:\Snort\bin\snort.exe -c "C:\Snort\etc\snort.conf" -l "C:\Snort\log" –N –A console

it shows the Generic Dial Up adapter as the interface its listening on. I'd like Snort to listen on the Ethernet interface. How would I tell Snort to do this? Thanks.

Posted by JoeV on March 29, 2006 10:56:35

If you do a snort -W it will list your available interfaces with numbers. Once you have the ID of the interface of choice then you can use the -i swith to select it would look something like this snort -i 2 and what ever other options you need. hope this helps.

Posted by Christop1 on April 12, 2006 14:36:24

I had the same problem (I'm also brand new to snort). It turned out that it was a Winpcap 3.1 error. I got winpcap 3.0 and it worked great. I found 3.0 hidden at ftp://gd.tuwien.ac.at/infosys/security/polito.it/winpcap/WinPcap_3_0_a_nogui.exe Enjoy.

Posted by Joel_Esler on April 13, 2006 04:35:03

What version of Snort are you running?

Posted by Christop1 on April 13, 2006 06:31:20

Version 2.4.3-ODBC-MySQL-FlexRESP-WIN32 (Build 26) on a Windows XP box.