snort執行時出現not using pcap_frames - 資安

Table of Contents

大家好~

小弟最近在研究SNORT
環境是appserv-win32-2.5.9;WinPcap_4_0_2.exe;adodb480;jpgraph-1.22
;Snort_2_8_0_1_Installer;acid-0.9.6b23

PHP跟MYSQL環境都裝好ACID網頁可以正確執行
但要啟動SNORT時

--== Initialization Complete ==--

,,_ -*> Snort! <*-
o" )~ Version 2.8.0.1 (Build 72)
'''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html
(C) Copyright 1998-2007 Sourcefire Inc., et al.
Using PCRE version: 7.4 2007-09-21

Rules Engine: SF_SNORT_DETECTION_ENGINE Version 1.6 <Build>
Preprocessor Object: SF_SSH Version 1.0 <Build>
Preprocessor Object: SF_SMTP Version 1.0 <Build>
Preprocessor Object: SF_FTPTELNET Version 1.0 <Build>
Preprocessor Object: SF_DNS Version 1.0 <Build>
Preprocessor Object: SF_DCERPC Version 1.0 <Build>
Not Using PCAP_FRAMES

到這行就停止了

我有查過相關資料http://www.linuxsir.org/bbs/showthread.php?t=278337
說要修改PCAP_FRAMES環境變量 =max
但是GOOGLE搜尋了一個下午都找不到在哪修改
請問有高手知道提點一下

謝謝~~~

--

All Comments

Dora avatarDora2007-12-17
如果是linux直接下PCAP_FRAMES=max snort -c "config file"
Noah avatarNoah2007-12-21
那如果是WINDOWS勒??
Michael avatarMichael2007-12-21
還是可以運作 只是會停在那個畫面