Snort Forums Archive

Archive Home » Windows » WinPcap Issue

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

WinPcap Issue

Posted by gmsaini on January 04, 2007 21:37:08

I have installed snort 2.6.0 on Win 2000.The installation done accrding to the guide from winsnort.com. Now its giving two errors one is Not Using PCAP_FRAMES when i type the following command:D:\win-ids\snort\bin>snort -v -i2

Snort is capturing but nothing coming up on web page. i used pcap 3.1

Also snort service is not starting automatically saying timed out.

Please help

Posted by syyau on January 05, 2007 06:35:33

Do you mean ACID web page not coming up?

Try to test your snort with option -T first to figure out what is wrong with the snort.

1) Make a path for snort command to your d:\win-ids\snort\bin directory
2) snort -d -c c:\snort\etc\snort.conf -l c:\snort\log -i 2 -T

Posted by gmsaini on January 05, 2007 07:23:40

I am using BASE the webpage is coming up very well and snort capturing the data also but the error coming up are Not Using PCAP_FRAMES.
Also there is some problem in winPCAM compilation which is showing in event viewer. and snort service not starting automatically.

Basically data packets are not being captured and not feeding in DB.

Posted by syyau on January 05, 2007 08:59:31

If your SNORT -T does not shwo any error that mean your snort.conf is configured properly.

The next step is to check your SNORT database on MySQL
make sure that you can see the entries on EVENTS table

select * from EVENT