Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: error while installing the winsnort...

  1. #1
    Junior Member
    Join Date
    Jan 2005
    Posts
    13

    error while installing the winsnort...

    hi.. i am new user for the winsnort... while i installing winsnort.. i found out this error while i typed c:\snoty\bin\snort -v -i1

    then it show the result after ctrl c

    .......
    .......
    .......
    .......
    pcap_loop: read error: PacketReceivePacket failed
    Run time for packet proccessing was 12.928000 seconds

    i m using for the winpcap 3.0..

    The winsnort can't work when i try to skip this error and continue the process. when i try to run the winsnort, this error happen.

    could not start the snort service on local computer
    Error 1067: The process terninated unexpectedly.

    thx for helping me....

  2. #2
    Senior Member
    Join Date
    May 2003
    Posts
    1,199
    have you read the README file that came with snort...if I remember correctly you have to move some files around and download an extra file from somewhere for it to work.
    Everyone is going to die, I am just as good of a reason as any.

    http://think-smarter.blogspot.com

  3. #3
    Junior Member
    Join Date
    Jan 2005
    Posts
    13
    u mean tat install for the winpcap issit, i using winpcap ver 3.0 now.. i tried to reinstall for few times also cannot solve this error.. thx for helping me...

  4. #4
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    run

    Snort -T

    (Note the capitalization).... and copy and paste the results here please if it errors out.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  5. #5
    Senior Member
    Join Date
    May 2003
    Posts
    1,199
    no, there is a seperate dll you need to donwload from some webpage. it is in the readme file, im just not on my laptop where i have all my "auditing" software, so I cant look it up for you.
    Everyone is going to die, I am just as good of a reason as any.

    http://think-smarter.blogspot.com

  6. #6
    Junior Member
    Join Date
    Apr 2005
    Posts
    10
    I ran into the same problem with my install, You need a patch if you are using it on a wireless card or you need to manually switch the card into monitor mode so it acts like an ethernet interface. The Pcap loop error happens when you use an interrupt ( Ctrl + C, etc ) and that is because you are forcing the process to quit so that is normal. Make sure you are reciving packets by typing snort -dv and see if you see packets...you should instantly.

  7. #7
    Junior Member
    Join Date
    Jan 2005
    Posts
    13
    hi all... after i typed the snort -T.. it show that no such file or directory... issit mean that i less something??

    while i reboot my system, in the task manager i only can find mysql-nt.exe and winmysqladmin.exe but just don have the snort.exe. i been set 'Automatic' in the service applet...

    plz let me know what can i do now..

  8. #8
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    When you type snort -T at the command prompt you either have to have changed to the snort directory _or_ have set your path to indicate the snort directory as part of it.

    You seem to have MySQL installed correctly but you aren't referencing snort properly.

    To be honest, your inability to have worked your way past the "No such file or directory" error message indicates that the benefits you might gain by installing snort are going to be far outweighed by the amount of time it takes you to get it running properly. Then, once you get it running properly your are unlikely to understand it's output which will simply stress you out and possibly cause you to take actions that might be destructive and unnecessary.

    I would consider using something like ZoneAlarm or a similar free product for your actual defenses and try and find a different box that you can play with snort on until you get a better grasp of computing in general

    My $2
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  9. #9
    Junior Member
    Join Date
    Jan 2005
    Posts
    13
    hi, Tiger Shark.. really sorry for trouble u.. but i just follow the referencing to the
    http://www.winsnort.com/modules.php?...artid=2&page=1

    i just following all the steps, i really try to learn on it but just don know what happening..

  10. #10
    Senior Member
    Join Date
    Jun 2003
    Posts
    236
    why not just use the snort from snort.org

    They have a windows installer now.
    I just installed it on a new systems no problems no hassles.
    That which does not kill me makes me stronger -- Friedrich Nietzche

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •