[Snort-users] snort on win2000 prof.

Chris Reid Chris.Reid at ...2817...
Thu Jan 16 23:02:01 EST 2003


Ricardo,

The error you are seeing (or not seeing), is because of a buffer overflow in
winpcap.  The authors of winpcap have increased the size of this particular
buffer from 1K up to 8K in more current versions of winpcap.

Uninstall your current winpcap, then download and install winpcap 2.3,
reboot, then try again.

    http://winpcap.polito.it/install/default.htm

Chris Reid


----- Original Message -----
From: "Ricardo Garin Jr." <r.garin at ...8015...>
To: <snort-users at lists.sourceforge.net>
Sent: Thursday, January 16, 2003 10:00 PM
Subject: Re: [Snort-users] snort on win2000 prof.


> Hi Morgan,
>
> Thanks for the URL. I followed the steps on "Snort 1.8.7 for Windows NT
> Server / 2000 / XP using Apache Webserver and Snortsnarf "
>
> When I was at "Testing Snort" section,
>
> f:\snort>snort -W
>
> Interface Device Description
> ----------------------------------------------------
> 1
>
> f:\snort\snort -v i1
> Initializing Network Interface
> ERROR: OpenPcap() device open:
>          Error opening adapter: The system cannot find the file
>
>          specified.
> Fatal Error, Quitting..
>
>
> Im using "Intel 82558-based Integrated Ethernet with Wake On LAN"
>
>
>
> Morgan R. Elmore wrote:
> > Jun,
> >
> > The following link is a great reference for installing snort on win32.
It
> > has download links and installation guides for various
> > builds/configurations.
> >
> > http://www.silicondefense.com/techsupport/downloads.htm
> >
> > -----Original Message-----
> > From: Ricardo Garin Jr. [mailto:r.garin at ...8015...]
> > Sent: Thursday, January 16, 2003 4:07 AM
> > To: snort-users at lists.sourceforge.net
> > Subject: [Snort-users] snort on win2000 prof.
> >
> >
> > i downloaded the snort win32 binary and proceed with the setup. but when
> > i click snort.exe, its looking for wpcap.dll which i installed then. it
> > now looks for ntwdblib.dll?
> >
> > is this really the way to install in on windows machine?
> >
> > --
> > virtually yours,
> > jun
> >
>
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by: Thawte.com
> Understand how to protect your customers personal information by
implementing
> SSL on your Apache Web Server. Click here to get our FREE Thawte Apache
> Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>





More information about the Snort-users mailing list