[Snort-devel] Snort for Windows with FlexResp/FlexResp2

Doug Potter dpotter at ...3087...
Thu Apr 15 14:04:28 EDT 2010


I cannot seem to make flexresp work. 

LibnetNT.dll is sitting in the Bin directory with Snort.exe. But the rule: 
alert tcp any any -> any any (react: block; msg: "Ping with TTL=100";
sid:1000001;) 



yields 


Unable to open the driver, Error Code : 14 
ERROR: Cannot open raw socket for libnet, exiting... 

but the rule: 
alert tcp any any -> any any (msg: "Ping with TTL=100"; sid:1000001;) 
seems to work (at least Snort runs without errors). 

Any help or ideas?

 

_______________________________________________

dougmarti

	

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20100415/cd5026a7/attachment.html>


More information about the Snort-devel mailing list