[Snort-users] Not using pcap_frames

Mayur Patil ram.nath241089 at ...11827...
Sun Jul 21 13:14:41 EDT 2013


Hello,

    I have successfully validated the snort on the windows XP SP3!!

    But while I run snort in sniffer mode I am *not getting *windows

    command line message "not using pcap_frames"
*
*
*     **
C:\>snort -v -i1
*
     Running in packet dump mode

        --== Initializing Snort ==--
     Initializing Output Plugins!
     pcap DAQ configured to passive.
     The DAQ version does not support reload.
     Acquiring network traffic from
"\Device\NPF_{0FF57B97-C9F2-4E67-9FA6-0D483418939A}".
      Decoding Ethernet

        --== Initialization Complete ==--

        ,,_     -*> Snort! <*-
      o"  )~   Version 2.9.4-WIN32 GRE (Build 40)
        ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team
               Copyright (C) 1998-2012 Sourcefire, Inc., et al.
               Using PCRE version: 8.10 2010-06-25
               Using ZLIB version: 1.2.3
*

*
*
      Commencing packet processing (pid=35712)
*
*

*
*

*
*      *And my snort is unable to detect ICMP packets !!
*

*
      What is wrong in my configuration ??

      Please guide !!

      Thanks !!
*

*
-- 
*Cheers,
Mayur*.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130721/6d24c8a6/attachment.html>


More information about the Snort-users mailing list