Feature #2820: pcap multi dev support for Windows (5.0.x) - Suricata - Open Information Security Foundation

Actions

Copy link

Feature #2820

closed

pcap multi dev support for Windows (5.0.x)

Added by Victor Julien about 5 years ago. Updated about 5 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

5.0beta1

Effort:

Difficulty:

Label:

Description

Using our Suricata msi pkg on 2016 Win server

C:\Program Files\Suricata>
C:\Program Files\Suricata>
C:\Program Files\Suricata>suricata.exe -c suricata.yaml -i 10.0.2.15 -i 192.168.56.101 -vvv
16/1/2019 -- 09:50:40 - <Info> - Running as service: no
16/1/2019 -- 09:50:40 - <Info> - translated 10.0.2.15 to pcap device \Device\NPF_{D53813F6-9382-4292-93A0-DA131DA66D9F}
16/1/2019 -- 09:50:40 - <Info> - translated 192.168.56.101 to pcap device \Device\NPF_{1B62EC1C-C38A-43E7-B178-09CBDC76A779}
16/1/2019 -- 09:50:40 - <Error> - [ERRCODE: SC_ERR_PCAP_MULTI_DEV_NO_SUPPORT(178)] - pcap multi dev support is not (yet) supported on Windows.

C:\Program Files\Suricata>suricata.exe -V
16/1/2019 -- 09:51:24 - <Info> - Running as service: no
This is Suricata version 4.1.2 RELEASE

C:\Program Files\Suricata>

Related issues 1 (0 open — 1 closed)