[Snort-users] Win32 Port of Snort

Michael J Worden mjworden at ...2784...
Mon May 20 13:06:02 EDT 2002



I'm in the process of comparing the functionality of Snort for Win32 (on
Windows 2000) with the versions I've been running on Linux for some time.
I'm finding Snort on Win32 almost useable with a few exceptions (of course,
I'm just getting started...):

My two big questions are:

1)  Is the ability to run as a service lost in the current version?  In the
faq, this has been added as of snort-1.6.3-patch2.  But the '-I' switch is
now allocated to a different function.  (Yes, I know about the 'srvany.exe'
option.  I've not had great experiences with srvany, and would like to
avoid it).

2)  Is there an option to forego the IP address on a Windows 2000
interface?  I'd like to avoid having my promiscuous mode adapter being
addressable.


Thanks in advance...


--
Michael Worden






More information about the Snort-users mailing list