Re: [Snort-users] How to start and monitor packets on windows

> > if i try to run sonrt from command line on bin directory
> with snort -v
> > -i1 it will be start but i can not see any packets
> transaction when i
> > am browsing any site.
>
> Then either interface "-i1" is incorrect, or, the sniffing
> interface is attached to an ethernet switch that is masking
> the data from you. If you are using a switch, you'll either
> need to replace it with a hub, purchase a "tap", or change
> your network somehow to see the traffic of interest.

For windows you may wish to verify that the network device is listed as 1.

Typically, since snort 2.3, '-i2' is required for the ethernet device as '1'
generally is the dialup device (ppp).


Also IDScenter is not recommended.

Cheers,

James Friesen, CIO
Lucretia Enterprises
Our World Is Here
info at lucretia dot ca
http://lucretia.ca



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users