Snort mailing list archives
RE: newbie question
From: "Hudak, Tyler" <Tyler.Hudak () roadway com>
Date: Wed, 6 Aug 2003 08:23:09 -0400
From the output below, Snort probably isn't hanging...its doing exactly what
you want. The only thing is you aren't seeing any packets go by on the
interface you are listening to.
Run 'snort -W' to list all the available interfaces and make sure you are
listening to the interface you want by running 'snort -dv -i #' where # is
the number of the interface you want to listen on.
Also, try generating some traffic on your local box to make sure you are
seeing things go by.
Tyler
--__--__--
Message: 1
Date: Tue, 5 Aug 2003 15:37:13 -0700 (PDT)
From: Ravi Malghan <rmalghan () yahoo com>
To: snort-users () lists sourceforge net
Subject: [Snort-users] newbie question
Hi: i just installed snort and winpcap on a w2K OS. I
have not made any changes. When I run snort.exe -dv,
it just hangs there. I donot see any packets. I donot
see any way to debug and see whatz happening. I tried
pinging and telnetting to the host when this was
running. What am I missing here.
Thanks in advance.
RM
=================
C:\PROGS\Snort\bin>snort.exe -dv
Running in packet dump mode
Log directory = log
Initializing Network Interface
\Device\NPF_{C66249AC-E359-47DE-AF1D-DA41B5B303CE
}
--== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface
\Device\NPF_{C66249AC-E359-47DE-AF1D-DA41B5B303CE
}
--== Initialization Complete ==--
-*> Snort! <*-
Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88)
By Martin Roesch (roesch () sourcefire com,
www.snort.org)
1.7-WIN32 Port By Michael Davis (mike () datanerds net,
www.datanerds.net/~mike)
1.8 - 2.0 WIN32 Port By Chris Reid
(chris.reid () codecraftconsultants com)
========================
Current thread:
- newbie question Ravi Malghan (Aug 05)
- Re: newbie question Jon Baer (Aug 05)
- <Possible follow-ups>
- RE: newbie question Hudak, Tyler (Aug 06)
- Re: RE: newbie question Ravi Malghan (Aug 06)
- Re: newbie question Hudak, Tyler (Aug 06)
- Re: Re: newbie question Ravi Malghan (Aug 06)
- RE: newbie question Hudak, Tyler (Aug 07)
