win32 ipv6

["Jason Tomforde" <jtomforde () mzeal com>]

Hello,

 

I would like to run snort on Windows XP with IPv6 enabled.  I downloaded the
latest win32 installer (Snort_2_8_3_2_Installer).  I added an 'ipvar' to the
snort.conf file but it is not recognized when the application is executed.
The output is as follows:

 

Running in IDS mode

 

        --== Initializing Snort ==--

Initializing Output Plugins!

Var '_ADDRESS' redefined

Initializing Preprocessors!

Initializing Plug-ins!

Parsing Rules file c:\Program Files\Snort\etc\snort.conf

ERROR: c:\Program Files\Snort\etc\snort.conf(27) => Unknown rule type: ipvar

Fatal Error, Quitting..

 

I attempted to build the latest win32 executable using the
snort___Win32_MySQL_IPv6_Release build configuration.  It built fine,
however, when I run the executable I get the following:

 

C:\Workspace\snort-2.8.3.2\src\win32\WIN32-Prj\snort___Win32_MySQL_IPv6_Rele
ase>snort -i3 -dev

Running in packet dump mode

 

        --== Initializing Snort ==--

Initializing Output Plugins!

ERROR: (null)(0) The following is not allowed: 0.0.0.0/0.0.0.0

Fatal Error, Quitting..

 

Please let me know if there is an available win32 binary with IPv6 enabled
OR provide some insight on how to build it with it enabled.

 

Thank You.

 

 

Jason Tomforde

Software Engineer

mZeal Communications

166 Boulder Dr, Suite 108

Fitchburg, MA 01420

Tel. (978)665-0280 ext 118

Fax (978)665-0286

jtomforde () mzeal com

 

CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users