[Snort-users] Snort183 -A unsock on W2K

Dragos Ruiu dr at ...381...
Thu Mar 14 19:33:06 EST 2002

Pcap.h is distributed with libpcap, and more appropriately in this case
the winpcap source distributions too.

The snort Win32 instaler does not include the code or the components to
compile snort.  The advice to download the code from CVS seems
the be the best bet (which as said also includes a version of this 
header file).  There is a windows/gui port of cvs called
wincvs you can use on a Windows environment to achieve this.
Googe will find it for you :-).


On 13 Mar 2002 22:49:14 -0600
Frank Knobbe <fknobbe at ...652...> wrote:

> On Tue, 2002-03-12 at 09:47, Dr. Richard W. Tibbs wrote:
> > 
> > Hey all:
> > I downloaded and installed the standard snort pkg for Win32 with IDS 
> > center.   I am trying to use the -A unsock feature, which I have used 
> > for months on a Linux setup with no problems.  I include snort.h and 
> > several other header files in the compile of my socket program, but 
> > under Windoze, MS visual studio can't find
> > pcap.h
> > 
> > I looked around via file search and no pcap.h, although I have 
> > downloaded and installed Winpcap as per the snort-for-windows 
> > instructions.... .
> > Looking at snort.h, it doesn't seem like the pcap.h file is unique to 
> > *nix, i.e. it is not enclosed with #ifndef WIN32 / #endif.
> > 
> > So my socket prog won't compile on W2K.  Any ideas?
> > The MS visual studio/VC98/include directory has bazillions of other .h 
> > files, but no pcap.h.
> I'm not sure what Snort package you downloaded, but grab the source from
> the Snort CVS. In the directory snort/win32/WIN32-Includes is where you
> find pcap.h.
> Regards,
> Frank

--dr                  pgpkey: http://dragos.com/dr-dursec.asc
      CanSecWest/core02 - May 1-3 2002 - Vancouver B.C. - http://cansecwest.com

More information about the Snort-users mailing list