Re: Snort-2.9.6.0 Packet Capturing

["Joel Esler (jesler)" <jesler () cisco com>]

You can’t sniff packets of other devices?  Well, no, you can’t do that.  You need to sniff from the device the traffic 
is actually on.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Vulnerability Research Team

On Mar 21, 2014, at 6:45 AM, Nanda Vardhan <nandu7ninja () gmail com<mailto:nandu7ninja () gmail com>> wrote:

I am a newbie of Snort IDS. I installed Snort 2.9.6.0 on ubuntu. I want to sniff packets from all the devices connected 
to wifi router and get alerts based on some rules I defined. I manually setup NIC to promiscuous mode. My problem is 
that I cannot sniff packets of other devices. Am getting packet information of only laptop on which Snort is running.

I used following command:

$ sudo snort -c  snort.conf -A console -i wlan0

Output:
           Preprocessor Object: SF_DNP3  Version 1.1  <Build 1>
           Preprocessor Object: SF_IMAP  Version 1.0  <Build 1>
           Preprocessor Object: SF_SIP  Version 1.1  <Build 1>
           Preprocessor Object: SF_DNS  Version 1.1  <Build 4>
           Preprocessor Object: SF_SSLPP  Version 1.1  <Build 4>
Commencing packet processing (pid=3312)
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!