Snort mailing list archives
Re: Newbie Question - Snort on Windows
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 21 Oct 2003 14:58:59 -0400
At 12:20 PM 10/21/2003, Joan L. Ackerman wrote:
I have snort running on a Linux server with the Ethernet port set to promiscuous mode. I am installing Snort on a Win2K machine and am not sure if there is a same setting. Is there a similar setting that needs to be set for Windows for promiscuous mode? Thanks in advance.
Snort will automatically set the port to promisc mode on all platforms, including both Linux and Windows. You shouldn't need to manually set the port to promisc on any platform.
If you really want non-promiscuous sniffing, you need to pass the -p parameter to snort to disable the default behavior of forcing the interface into promisc mode.
------------------------------------------------------- This SF.net email is sponsored by OSDN developer relations Here's your chance to show off your extensive product knowledge We want to know what you know. Tell us and you have a chance to win $100 http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Newbie Question - Snort on Windows Joan L. Ackerman (Oct 21)
- Message not available
- Re: Newbie Question - Snort on Windows Matt Kettler (Oct 21)
- Message not available
