Snort mailing list archives

Re: Snort for WIndows newbie question...


From: Matt Kettler <mkettler () evi-inc com>
Date: Mon, 26 Apr 2004 16:44:11 -0400

At 10:13 AM 4/26/2004, Ambrose, Joseph wrote:
“The procedure entry point PacketGetNetInfo could not be located in the dynamic link library Packet.dll.

I thought I installed Snort correctly, howeverÂ…..

After experiencing this myself, it appears that it's a winpcap version problem.

If you go to the source of winpcap:
http://winpcap.polito.it/install/default.htm

Winpcap 3.0 works, but Winpcap 3.1-beta does not.

Also note that you have to un-install 3.1 in order to successfully downgrade winpcap. You can verify the re-install worked by locating packet.dll in your system32 directory and doing a right-click properties. The version tab will give you the version number of packet.dll and you should see it change after you're done.

For reference, my working version of the dll is reported as 3.0.0.18 by windows. This may not be the only working version, but it is one that works for me with snort 2.1.2.


-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg297
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: