[Snort-users] Problems Snort and Windows XP

Steven Watts stewatts at ...125...
Thu Oct 28 09:22:32 EDT 2004


I have reverted to version 3.0 of WINPCAP and I am using the latest binary 
from snort.org but now I am getting:

C:\Snort>snort -v

        --== Initializing Snort ==--

Initializing Network Interface
ERROR: OpenPcap() device  open:
        Error opening adapter

I am also running VMWARE on this machine (although snort executes on the 
"real machine") wasn't sure if this would affect the network setup as it now 
has virtual network devices for VMware

Any ideas?


>From: "Chris Reid" <chris.reid at ...3029...>
>Reply-To: chris.reid at ...3029...
>To: "Steven Watts" <stewatts at ...125...>
>CC: snort-users at lists.sourceforge.net
>Subject: Re: [Snort-users] Problems Snort and Windows XP
>Date: Mon, 25 Oct 2004 11:31:17 -0600 (MDT)
>MIME-Version: 1.0
>Received: from mc11-f9.hotmail.com ([]) by mc11-s18.hotmail.com 
>with Microsoft SMTPSVC(5.0.2195.6824); Mon, 25 Oct 2004 11:57:51 -0700
>Received: from sc8-sf-uberspam1.sourceforge.net ([]) by 
>mc11-f9.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824); Mon, 25 Oct 2004 
>11:57:50 -0700
>Received: from projects.sourceforge.net (sc8-sf-list1-b.sourceforge.net 
>[])by sc8-sf-uberspam1.sourceforge.net (Postfix) with ESMTPid 
>BECF91D2F65; Mon, 25 Oct 2004 10:32:12 -0700 (PDT)
>Received: from sc8-sf-mx1-b.sourceforge.net ([] 
>helo=sc8-sf-mx1.sourceforge.net)by sc8-sf-list1.sourceforge.net with esmtp 
>(Exim 4.30)id 1CM8gp-0006Hc-Uwfor snort-users at lists.sourceforge.net; Mon, 
>25 Oct 2004 10:31:27 -0700
>Received: from dsl-edgt-66-18-199-34-cgy.nucleus.com([] 
>helo=toronto.codecraftconsultants.com ident=nxe5jb02pohzsyglmwwq)by 
>sc8-sf-mx1.sourceforge.net with esmtp (TLSv1:AES256-SHA:256)(Exim 4.41)id 
>1CM8go-0006SL-Oafor snort-users at lists.sourceforge.net; Mon, 25 Oct 2004 
>10:31:27 -0700
>Received: from toronto.codecraftconsultants.com 
>(IDENT:jxtoehdgdsdymj3ncus3 at ...12611... 
>[IPv6:::1])by toronto.codecraftconsultants.com (8.12.9/8.12.9) with ESMTP 
>id i9PHVHfv016720;Mon, 25 Oct 2004 11:31:18 -0600 (MDT)
>Received: (from www at ...274...)by toronto.codecraftconsultants.com 
>(8.12.9/8.12.9/Submit) id i9PHVH6k009584;Mon, 25 Oct 2004 11:31:17 -0600 
>Received: from        (SquirrelMail authenticated user 
>chris);        by webmail.codecraftconsultants.com with HTTP;        Mon, 
>25 Oct 2004 11:31:17 -0600 (MDT)
>X-Message-Info: 0jbW5ANosZJmSZkGtX6Uhi34uFNyiR7g
>X-Authentication-Warning: toronto.codecraftconsultants.com: www set sender 
>to chris.reid at ...3029... using -f
>Message-ID: <14978. at ...12598...>
>In-Reply-To: <BAY9-F41bg5XmllgYBr00000fa6 at ...125...>
>References: <BAY9-F41bg5XmllgYBr00000fa6 at ...125...>
>User-Agent: SquirrelMail/1.4.3a
>X-Mailer: SquirrelMail/1.4.3a
>X-Spam-Score: 0.1 (/)
>X-Spam-Report: Spam Filtering performed by sourceforge.net.See 
>http://spamassassin.org/tag/ for more details.Report problems to 
>    BODY: Text interparsed with -0.0 SF_CHICKENPOX_BACKSLASH BODY: Text 
>interparsed with \0.0 SF_CHICKENPOX_APOSTROPHE BODY: Text interparsed with 
>'0.0 SF_CHICKENPOX_PERIOD   BODY: Text interparsed with .0.0 
>SF_CHICKENPOX_UNDERSCORE BODY: Text interparsed with _
>Errors-To: snort-users-admin at lists.sourceforge.net
>X-BeenThere: snort-users at lists.sourceforge.net
>X-Mailman-Version: 2.0.9-sf.net
>Precedence: bulk
><https://lists.sourceforge.net/lists/listinfo/snort-users>,<mailto:snort-users-request at lists.sourceforge.net?subject=unsubscribe>
>List-Id: Snort users talk about... Snort! 
>List-Post: <mailto:snort-users at lists.sourceforge.net>
>List-Help: <mailto:snort-users-request at lists.sourceforge.net?subject=help>
><https://lists.sourceforge.net/lists/listinfo/snort-users>,<mailto:snort-users-request at lists.sourceforge.net?subject=subscribe>
>X-Original-Date: Mon, 25 Oct 2004 11:31:17 -0600 (MDT)
>Return-Path: snort-users-admin at lists.sourceforge.net
>X-OriginalArrivalTime: 25 Oct 2004 18:57:50.0966 (UTC) 
>Snort 1.7 is quite dated compared to the current stable version.  Unless
>you have a compelling reason not to, I would suggest downloading the 2.2
>version for Windows from the snort.org website and try that one instead.
>Chris Reid
> > Hi Guys
> >
> > I have come to use Snort for the first time and I can't get it to work. 
> > am using XP SP2 and I have downloaded the binary from:
> > http://download.datanerds.net/binaries/snort-1.7-win32-static.zip
> >
> > I have have kept all the default settings and when I run snort -v, I 
> >
> >         --== Initializing Snort ==--
> >
> > Initializing Network Interface
> > \Device\NPF_GenericNdisWanAdapter\Device\NPF_{A39
> > 
> >
> > Then I get a windows error saying "Snort has encountered a problem and
> > needs to close"
> >
> > Can anyone help?
> >
> > Thanks in advance
> >
>This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
>Use IT products in your business? Tell us what you think of them. Give us
>Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>Snort-users list archive:

Want to block unwanted pop-ups? Download the free MSN Toolbar now!  

More information about the Snort-users mailing list