-
August 28th, 2003, 09:10 AM
#1
Junior Member
need help in configuring snort on XP
Hi all,
I've been trying to configure snort on my XP. I've spent practically the whole day reading the friggin snort manual... and to be honest I feel like running through the walls in my house. This is driving my crazy. I downloaded the the snort 2.0 version for win32. The Winpcap version I installed is err... winpcap_2_3 and the author's comments about the libnetNT driver was "LibnetNT Driver
Certain snort functions, notably the FlexResp functions, will also require an
appropriate version of LibnetNT to be installed in order for snort to operate
properly. Snort 2.0 has been tested with the version of LibnetNT from August
2001. The current installation package can be downloaded from:
http://www.securitybugware.org/libnetnt/" I'm
I'm pretty sure I installed the right one, though none of the download links stated that it was a release from "August 2001".
C:\Snort\bin>snort.exe -c "C:\snort\etc\snort.conf" -l "C:\snort\Log" -A full -i 1 -d -e -X "C:\snort\etc\classification.config"
Running in IDS mode
Log directory = C:\snort\Log
Initializing Network Interface \Device\Packet_NdisWanIp
OpenPcap() device \Device\Packet_NdisWanIp network lookup:
The operation completed successfully.
ERROR: OpenPcap() FSM compilation failed:
PCAP command: %s
Fatal Error, Quitting..
C:\Snort\bin>
That is what I get when I execute the commands. Is there some other configurations that I need to do other then to include the correct rule path for snort.config. I hope I was explicit. Any tips would be greatly appreciated.
1l31l2uTiCu$_
"bad deeds spawns rebirth"
"rebirth itself shall be denied with good deeds"
\"Bad deeds spawns rebirth\"
\"Rebirth itself shall be denied with good deeds\"
-
August 28th, 2003, 10:56 AM
#2
arhh this is pretty simple to fix you just havent installed WinPcap, this is one of the dependences, needed to install snort and quite a few other network tools on windows.
here its website and its got loads of info
http://winpcap.polito.it/
what you done otherwise looks alrite to me, just install winPcap and see how it goes
PM if you need any more help
i2c
-
September 2nd, 2003, 08:17 AM
#3
Actually snort for XP sucks do not deploy it. Use it just for learning otherwise you might run into trouble.
-
September 4th, 2003, 10:41 AM
#4
Senior Member
Buddy as pointed out by other members you will have to download Winpcap after that you need to set your Netwrok environment correctly in the conf files.....
I am personally using Snort over, but as also rightly pointed just use it for learning purpose.
Regards
kalp
****** Any man who knows all the answers most likely misunderstood the questions *****
-
September 4th, 2003, 10:42 PM
#5
Junior Member
Thanks for the tips guys very grateful. It's working now ***HOMER SIMPSON*** Woohoo
Best Regards,
1l31l2uTiCuS
\"Bad deeds spawns rebirth\"
\"Rebirth itself shall be denied with good deeds\"
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|