Install snort on Windows 10 (Part 3)

[@DigitalMight]

For anyone still using this guide, if the snort -W command won't show interfaces there is a fix: in the snort\bin folder either rename or put .old at the end of both wpcap.dll and Packet.dll . Once you have done that, uninstall npcap and then reinstall it, with the wireless option selected and the compatibility mode selected. The snort -W command should show the interfaces after that.

[@jakkulatarun1161]

Thanks, Benjamin. It worked!

[@testsd]

Really helpful video series! Thanks so much Miguel! snort -i 1 -c c:\Snort\etc\snort.conf -T snort -i 1 -c c:\Snort\etc\snort.conf -A console IMPORTANT -> (where 1: the number of interface you want eg 1, 2 etc IMPORTANT TO type the correct interface number or you won't have any messages shown when opening tabs and you'll get stuck with "Commencing packet processing". Find the correct interface with ipconfig /all ) alert icmp any any -> any any (msg:"Testing ICMP"; sid:1000001;) alert tcp any any -> any any (msg:"Testing TCP"; sid:1000002;) alert udp any any -> any any (msg:"Testing UDP"; sid:1000003;) Also, it might be best that while installing Npcap you DON'T tick "restrict Npcap driver's access to Administrators only" so you don't get the "registry key" message.

[@edithflores7025]

I am still getting the same error message for whitelist Can you help?

[@simranlahrani]

Which interface to use when plz help

[@Native722]

I still have the Commencing packet processing, how do I know which interface number is my connection? I have so many due to virtual machine.

[@ioannamaria]

@@Native722 Well, I don't remember what I did then, but I think I tried all of them. I've written something about this command ipconfig /all.

[@hanetrr]

My man, i just had to suscribe because you saved my ass. I struggled ALL day trying to install this. And you helped me not only installing it but also testing it. THANK YOU

[@scottspa74]

Every one of these 3 tutorials is excellent! Great job, Miguel, and thank you.

[@alphaboss3533]

Thank you so much, loved the step by step, since I have absolutely no clue how to do this. Appreciate the no skipping of parts. Great job ;)

[@pauldessoy5369]

Hey Miguel. Thanks a lot for these videos - saved me a load of time when I could not get snort working. Nice job!

[@inhaledchaos1822]

This whole series was SUPER helpful. Thank you!

[@RealShinpin]

I wish you would make more tutorials. I genuinely enjoyed your tutorials haha.

[@tyfawkes]

Nice, you helped me get through a couple errors. finally got it to successfully validate. 👍

[@darkbluepotato2600]

Thank you so much 🙏🙏 Your guide was very well explained !

[@topleads9748]

Mr Miguel Ortega thank you a lot finally have my IDS working, again save my day!

[@Native722]

Mines is still stuck on Commencing packet processing

[@samuelteshome6771]

Thanks so much, Miguel you saved my behind!!! Had to subscribe as well!!

[@spiritumsantorini]

It worked! Finally. Thank you so much!

[@KeithMoon_nz]

thanks for this video set, this got me going! really appreciate it.

[@orionpeterfernandes8832]

So well explained, kudos to you !

[@dhruvinshah1350]

really informative video.helped me a lot. Subscribing for more videos like these.

[@khushigelda5397]

ERROR: Invalid device number: 1. Fatal Error, Quitting.. Could not create the registry key. i dont get any interface when using snort -W . can anyone help?

[@fader3680]

if u get fatal error with the code. Delete (uninstall npcap and download the winpcap again) then it will work for u.

[@shahdaalabri993]

I have error "c:\snort\etc\c:\snort ules\blacklist.rules(0) unable to open rules files" c:\snort\etc\c:\snort ules\blacklist.rules " invalid argument. I checked rules files if there blacklist.rules it's there Please help me quickly 🙏 😢

[@abdulqaribstanikzai5180]

Well done,, thanks for the great video

[@mitohattori4937]

thank you so much, your video helped me a lot

[@darphaprothon20]

i loved the backsplash

[@samuelteshome6771]

Can someone help me understand why my interfaces aren't popping up please

[@rachelmatthew6771]

same I am having issues. Did u fix the issue?

[@harini7393]

the video is GREAT!!!!!!!!!!!! It is simple and easy.

[@HalonXPR]

You're a life saver Miguel! (^.^)

[@edithflores7025]

I cannot get past the whitelist error even though it is in rules folder, assistance anyone?

[@Brp720]

Thank you so much for this!

[@nurulaida2449]

I had follw all the step but my whitelist still not detect? My version of snort is 2.9.16.1. Could u help, cause i dont find a yt that show for my version.

[@oscarjulianmartinezalape1202]

mi es snort se quedo en este paso Commencing packet processing (pid=704) me puedes ayudar por que razon no me culmino, los paquetes. mucgas gracias

[@andyitpro1880]

★★★★★ I can't help...fallin...with you. Best Solution. Thanks

[@Glxyx]

11:39 it's not working with me, I have a project on Sunday I hope u can help me):

[@Russsog]

im stuck in the comencing packet processing

[@jojodojo2646]

"snort -i 1 -c c:\Snort\etc\snort.conf -A console" :here try replacing 1 with whatever interface number you got while running snort -W

[@Russsog]

@@jojodojo2646 what can i put in console that can fix it?

[@jojodojo2646]

@@Russsog try snort -i 2 c c:\Snort\etc\snort.conf -A console instead of 1 in snort -i 1 -c c:\Snort\etc\snort.conf -A console

[@jojodojo2646]

you can try with 2/3/4/5 whatever interface number it is showing when you run snort -W

[@Russsog]

@@jojodojo2646 a ok thank u so much bro

[@muhammadahsan2994]

sir i face some error like VCruntime140.dll was not found. how i moveon and correct this error kindly tell me

[@briliantosuprapto2912]

ERROR: c:\Snort\etc\snort.conf(253) Could not stat dynamic module path "/usr/local/lib/snort_dynamicrules": No such file or directory. Fatal Error, Quitting.. Could not create the registry key. PLEASE HELPP

[@over9thinker]

You have to put # this should be like this: # dynamicdetection directory /usr/local/lib/snort_dynamicrules

[@johneazy1]

Unable to open address file c:\Snort\etc\c:snort ules\blacklist.rules, Error: Invalid argument Fatal Error, Quitting...... Please help

[@nirmalvp412]

can somebody help me to solve this error? pcap DAQ configured to passive. The DAQ version does not support reload. Acquiring network traffic from "\Device\NPF_{D2A171BC-7226-4BB3-990E-62492E2D611E}". Decoding Ethernet ERROR: log_tcpdump: Failed to open log file "log/snort.log.1604341082": No such file or directory Fatal Error, Quitting..

[@topleads9748]

en check for the snort log file as the error is pointing to a deleted log file

[@yasinalperbingul7420]

Have you solved your problem? I conuter the same problem too.

[@ahmadkemrisyahputramunthe1612]

@@topleads9748 where should i check the snort log file brother?

[@ahmadkemrisyahputramunthe1612]

@@yasinalperbingul7420 have you got the point of the problem bro?

[@phamuc7785]

ERROR: c:\Snort\etc\snort.conf(0)Unable to open rules file": Invalid argument. Fatal Error, Quitting.. Could not create the registry key. Please help me

[@RealShinpin]

Same issue, Trying to figure it out

[@phuongnguyen9185]

verry good. Thank you very much

[@jamesbond-cx2uh]

Stuck at commencing packet processing. Anyone has any idea how to solve this problem?

[@jojodojo2646]

"snort -i 1 -c c:\Snort\etc\snort.conf -A console" :here try replacing 1 with whatever interface number you got while running snort -W

[@darphaprothon20]

im stuck here $Commencing packet processing (pid=15812)

[@darphaprothon20]

i tried restart but im still stuck here 11:17 i cant see this 11:27

[@darphaprothon20]

found fix snort -W search for your network then run command snort with your interface number it will work fine

[@afnanal-nabhani892]

Thank you a lot.

[@AbdelaliBennadji]

Thanks Miguelle

[@hahahihi4082]

Thanks

[@htpoh65o5mh5yo5]

priceless

[@rryunarumi]

pbe nya lok

[@faizsuhaimi13]

hello anyone...or the creator...i'm having an error at the end of the video like this +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... ERROR: c:\Snort ules\local.rules(21) No argument passed to keyword "sid". Make sure you didn't forget a ':' or the argument to this keyword. Fatal Error, Quitting.. idk whats wrong with it.

[@keshavgoyal3106]

ERROR: log_tcpdump: Failed to open log file "log/snort.log.1621172629": No such file or directory Fatal Error, Quitting.. how to resolve this

[@Silverops446]

I have the same error, has this been resolved?

[@ahmadkemrisyahputramunthe1612]

@@Silverops446 have you found the point of the problem bro?

[@ahmadkemrisyahputramunthe1612]

Have you found the point of the problem bro?

[@bluntmaayne]

c:\Snort\bin>snort -i 1 -c c:\Snort\etc\snort.conf -T "c:\Snort\etc\c:\Snort\prepoc_rules\decoder.rules": Invalid argument. Fatal Error, Quitting.. Please help

[@MR.E820]

You probably have a newer version of Snort. Ignore command she said...navigate to CD C:\snort\bin should see C:\Snort\bin> Snort Hit enter It will start running

[@rachelmatthew6771]

Hey i am not able to see any interfaces? I followed all the steps. Anyone has any solutions?

[@jojodojo2646]

it is because I think you made some mistake while installing from step1 in the video . I also was not able to view interface giving snort -W but later on after uninstalling and installing fresh it works from step 1