Snort mailing list archives

Re: Newbie Question - Snort on Windows


From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 21 Oct 2003 14:58:59 -0400

At 12:20 PM 10/21/2003, Joan L. Ackerman wrote:
I have snort running on a Linux server with the Ethernet port set to promiscuous mode. I am installing Snort on a Win2K machine and am not sure if there is a same setting. Is there a similar setting that needs to be set for Windows for promiscuous mode? Thanks in advance.

Snort will automatically set the port to promisc mode on all platforms, including both Linux and Windows. You shouldn't need to manually set the port to promisc on any platform.

If you really want non-promiscuous sniffing, you need to pass the -p parameter to snort to disable the default behavior of forcing the interface into promisc mode.






-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: