Snort mailing list archives
RE: Promiscious mode + Win2k
From: "Michael Steele" <michaels () winsnort com>
Date: Fri, 13 Jun 2003 08:24:00 -0700
B, If you can ping the other boxes then Snort should detect them. It could be you have a switch, and in that case you wont see the other systems (check the model # with the manufacture), and it needs to be auto sensing. Cheers... -Michael Steele -- System Engineer / Security Support Technician mailto:michaels () winsnort com Website: http://www.winsnort.com Snort: Open Source Network IDS - http://www.snort.org -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of darniot benjamin Sent: Friday, June 13, 2003 3:04 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Promiscious mode + Win2k Hi, I want to use Snort (or windump...) as a Packet logger under Win2k. I have installed Winpcap 3.0 to capture IP trafic. My computer belongs to a small local network (192.168.1.0/24) connected by a hub. When i start Snort or another packet logger, i see only broadcast or trafic to my computer. I don't understand why my network's card are not in promiscious mode. However, Winpcap seems to be correctly installed. I want to see all the local network's trafic (it's a Hub so it should work??). If someone got an idea. Best regards, B. Darniot _____ Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Testez le nouveau Yahoo! Mail <http://fr.mail.yahoo.com>
Current thread:
- Promiscious mode + Win2k darniot benjamin (Jun 13)
- Re: Promiscious mode + Win2k Erek Adams (Jun 13)
- RE: Promiscious mode + Win2k Michael Steele (Jun 13)