How do I configure WireShark to capture Snort packages on Windows
Snort Ver. 2.9.17 Windows 10
From the Wireshark wiki:
"Does not currently run under Windows. The problem seen was a failure to launch Snort using g_spawn_async_with_pipes(). Any suggestions on how to fix this would be welcome."
Please open an issue on the Wireshark GitLab site so that this can be tracked and maybe repaired.
At the very least there should be a warning message similar to:
report_failure("Snort dissector: Can't run snort - config file '%s' not found\n", pref_snort_config_filename);
in packet-snort.c to indicate there is a problem.
Asked: 2020-12-03 16:54:58 +0000
Seen: 202 times
Last updated: Dec 05 '20
Please explain what you want to accomplish. As it sounds like you are trying to mix things that have no relation to one another.
What @Chuckc describes in his answer is "capturing packets in Wireshark and having Wireshark feed them to Snort to see what it has to say about them, and report that in the dissection"; is that what you're talking about?