[Snort-users] Snort and Win32

L. Christopher Luther CLuther at ...6333...
Thu Jan 9 09:29:06 EST 2003

I don't currently use either of these -- primarily because I've no time to
deal with configuring a web site to handle either of these utilities.
Instead I plan to use the MyODBC or MyOLDEB drivers to allow Crystal Reports
or MS Access (sssshudder...) to run reports off of our MySQL database.  


-----Original Message-----
From: Incidents [mailto:Incidents at ...4371...]
Sent: Wednesday, January 08, 2003 7:54 PM
To: 'L. Christopher Luther'
Subject: RE: [Snort-users] Snort and Win32

Another question,
For those that use snort on a Windows platform and also use IDS Center to
configure snort, what's the program of choice for viewing the logs???
SnortSnarf or ACID?


-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of L. Christopher
Sent: Wednesday, January 08, 2003 10:57 AM
To: 'Incidents'
Cc: Snort-Users (E-mail)
Subject: RE: [Snort-users] Snort and Win32

The problem is not with Snort; it's with WinPCap.  Specifically, all
versions of WinPCap after 2.02 disable themselves with they detect a SMP
platform (see http://winpcap.polito.it/misc/faq.htm#Q-15).  
I too had this problem on a dual-PIII, and I reverted to using Snort 1.8.6
and WinPCap 2.02.  Though WinPCap does not officially support SMP platforms,
at least this version of WinPCap does not disable itself.


-----Original Message----- 
From: "Incidents" <Incidents at ...4371...> 
To: <snort-users at lists.sourceforge.net> 
Date: Wed, 8 Jan 2003 00:33:51 -0800 
Subject: [Snort-users] Snort and Win32 

Hello All, 
I've installed snort 1.9 on a Windows 2000 Advanced Server box running 
dual-PIII. I've also installed IDS Center. I went through the config 
sections and set it up with no errors. When I click on the test button I 
receive the following error: 
|> IDScenter test console <| 
Initializing Output Plugins! 
Log directory = E:\Snort\Log 
Initializing Network Interface 
ERROR: OpenPcap() device  open: 
        Error opening adapter: Overlapped I/O operation is in progress. 
Fatal Error, Quitting.. 
I installed the WinPcap latest version 3.04? (I think). Looking through 
the archives, the best answer I found was that snort cannot run on 
multiple processor machines. Is this correct? Any other thoughts? 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030109/c4bd0cc0/attachment.html>

More information about the Snort-users mailing list