Support #4409
closedDoes the default Suricata 6 executable no longer supporting IPS mode on Windows?
Added by Bi. K. about 5 years ago. Updated over 4 years ago.
Description
The displayed error is "suricata: unknown option -- windivert".
"--windivert" option is recognized on Suricata 5 version.
PM Updated by Peter Manev about 5 years ago Actions #1
It does. It is just a different package though as windivert seems to trigger a good few AV warnings when compiled in with it.
I am making an updated 6.0.2 with windivert now - would you be willing to try it out?
PM Updated by Peter Manev about 5 years ago Actions #2
- Tracker changed from Bug to Support
BK Updated by Bi. K. about 5 years ago Actions #3
Yes Sir!
I will be.
PM Updated by Peter Manev about 5 years ago Actions #4
Do you mind giving this one a try
https://drive.google.com/file/d/1OLMn_8aCXQmYiWdXkXUyGsnFC_XTo0jw/
BK Updated by Bi. K. about 5 years ago Actions #5
I try to download the file but Google Drive blocks it.
Maybe beacuse it is an executable.
PM Updated by Peter Manev about 5 years ago Actions #6
Ah yes - that problem exactly - gdrive for example detects the windivert part as malicious.
Can you try that instead
https://drive.google.com/file/d/1xAYGHKNivMw0Dn7UGABgfTFYlh-RbhmY/
BK Updated by Bi. K. about 5 years ago Actions #7
I try the latest executable but, when launching the command to start Suricata, an error message says that "lua54.dll" is not found.
I will wait until the full release being available to try again.
Thank you!
AH Updated by Andreas Herz over 4 years ago Actions #8
- Status changed from New to Closed
Hi, we're closing this issue since there have been no further responses.
If you think this issue is still relevant, try to test it again with the
most recent version of suricata and reopen the issue. If you want to
improve the bug report please take a look at
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Reporting_Bugs