Snort on Windows 2000 Server

[tanker135]

I've installed Snort IDS on Win2K. I need to attach this to my internet service but first I need to turn my Win2K ethernet interface into a passive interface. Does anyone know how to do this?

 

[peterve]

this is how I did it :

During installation of the IDS, I've set the IP to 1.1.1.1 netmask 255.255.255.248, no gateway set).
Then disable Netbios over TCP/IP, remove WINS bindings, disable client for MS networks & file&print sharing. (

Then, after installing snort, set both adapters to use DHCP, make sure the internet router is not acting as DHCP relay agent, and set this registry key to disable APIPA :

Add the "IPAutoconfigurationEnabled" DWORD registry entry with a value of 0x0 to the following registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces Adapter subkey

NOTE: This subkey includes the globally unique identifier (GUID) for the computer's LAN adapter.

Specifying a value of 1 for IPAutoconfigurationEnabled DWORD entry will enable APIPA, which is the default state when this value is omitted from the registry.


Then see what it does


--------------------------------------------------------------------

http://kickme.to/dpsecurity

--------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------