Re: Snort and the Windows Family...

[Benoit Clarembeau <bclarembeau () mail be>]

Ok, I'll verify that... next week! (there is a sunny weekend in front of me ;-))

Thanks for your help.

Benoit Clarembeau

> ----------------------------------------
> From: Erek Adams <erek () theadamsfamily net>
> Sent: Fri Apr 05 20:57:32 GMT+02:00 2002
> To: Benoit Clarembeau <bclarembeau () mail be>
> Subject: Re: [Snort-users] Snort and the Windows Family...
>
>
> On Fri, 5 Apr 2002, Benoit Clarembeau wrote:
>
> > Here is my problem: I have installed Snort 1.8.2 (running under Windows 2000
> > Server) + Winpcap 2.2 + Mysql + PHP + acid as described on Silicon Defense
> > Website. I have exactly followed all the instructions. I have 3 PC's plugged
> > into a hub:
> >
> > -------------------------------
> > |           HUB               |
> > -------------------------------
> >  +            +           +
> >  +            +           +
> >  +            +           +
> > Snort        PC1         PC2
> >
> > Snort can just see the packets if he's the IP source or destination, not the
> > traffic between PC1 and PC2... It's strange because I have no problem with
> > another little network with the same configuration, but in this one Snort is
> > running under Windows XP... Where is the problem? What can I do? I can't
> > find what is bad with this config...
>
> Just a guess, but this is a 10/100 autosensing hub isn't it?  One of those
> cards is 10mb only and the other one is a 10/100mb card...  If so:
>
> http://www.snort.org/docs/faq.html#6.21
>
> -----
> Erek Adams
> Nifty-Type-Guy
> TheAdamsFamily.Net

-----------------------------------------------------
Mail.be, Free WebMail and Virtual Office
http://www.mail.be


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users