RE: [Snort-users] Snort for WIndows newbie question...

Thanks Matt!

It works now....=20

Now all I have to do is convert the text files to allow notepad to read =
them.....



Joseph Ambrose, MCSE
System and Network Manager
The Conference Board
P: 001-212-339-0443
F: 001-212-836-3802
E: Joe.Ambrose@conference-board.org
Visit our Award Winning Web Site: www.conference-board.org


-----Original Message-----
From: Matt Kettler [mailto:mkettler@evi-inc.com]=20
Sent: Monday, April 26, 2004 4:44 PM
To: Ambrose, Joseph; Sort List (E-mail)
Subject: Re: [Snort-users] Snort for WIndows newbie question...

At 10:13 AM 4/26/2004, Ambrose, Joseph wrote:
>"The procedure entry point PacketGetNetInfo could not be located in the =

>dynamic link library Packet.dll.
>
>I thought I installed Snort correctly, however.....

After experiencing this myself, it appears that it's a winpcap version =
problem.

If you go to the source of winpcap:
http://winpcap.polito.it/install/default.htm

Winpcap 3.0 works, but Winpcap 3.1-beta does not.

Also note that you have to un-install 3.1 in order to successfully=20
downgrade winpcap. You can verify the re-install worked by locating=20
packet.dll in your system32 directory and doing a right-click =
properties.=20
The version tab will give you the version number of packet.dll and you=20
should see it change after you're done.

For reference, my working version of the dll is reported as 3.0.0.18 by=20
windows. This may not be the only working version, but it is one that =
works=20
for me with snort 2.1.2.=20





-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users