作者kidd1118 (小扬)
站内NetSecurity
标题[问题] snort执行时出现not using pcap_frames
时间Wed Dec 12 17:11:07 2007
大家好~
小弟最近在研究SNORT
环境是appserv-win32-2.5.9;WinPcap_4_0_2.exe;adodb480;jpgraph-1.22
;Snort_2_8_0_1_Installer;acid-0.9.6b23
PHP跟MYSQL环境都装好ACID网页可以正确执行
但要启动SNORT时
--== Initialization Complete ==--
,,_ -*> Snort! <*-
o" )~ Version 2.8.0.1 (Build 72)
'''' By Martin Roesch & The Snort Team:
http://www.snort.org/team.html
(C) Copyright 1998-2007 Sourcefire Inc., et al.
Using PCRE version: 7.4 2007-09-21
Rules Engine: SF_SNORT_DETECTION_ENGINE Version 1.6 <Build>
Preprocessor Object: SF_SSH Version 1.0 <Build>
Preprocessor Object: SF_SMTP Version 1.0 <Build>
Preprocessor Object: SF_FTPTELNET Version 1.0 <Build>
Preprocessor Object: SF_DNS Version 1.0 <Build>
Preprocessor Object: SF_DCERPC Version 1.0 <Build>
Not Using PCAP_FRAMES
到这行就停止了
我有查过相关资料
http://www.linuxsir.org/bbs/showthread.php?t=278337
说要修改PCAP_FRAMES环境变量 =max
但是GOOGLE搜寻了一个下午都找不到在哪修改
请问有高手知道提点一下
谢谢~~~
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 218.210.104.190
1F：推 mnbbnm:如果是linux直接下PCAP_FRAMES=max snort -c "config file" 12/12 20:01
2F：→ kidd1118:那如果是WINDOWS勒?? 12/12 22:46
3F：推 NESOKING:还是可以运作 只是会停在那个画面 12/13 18:12