blocks|key|2697963|text|在Windows+10上，winpcap不再受支持。有一个兼容的替代npcap：https://nmap.org/npcap/#download在安装npcap时，使用最新版本(现在是1.5)，并确保在安装程序中安装了兼容的API选项。它适用于Snort2.9.18。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2697964|entityMap|0|LINK|mutability|MUTABLE|url|https://nmap.org/npcap/#download^0|14|W|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

On Windows 10, winpcap is no longer supported. There is a compatible alternative npcap: <a href="https://nmap.org/npcap/#download" rel="nofollow noreferrer">https://nmap.org/npcap/#download</a>
When installing npcap, use the latest version (now it's 1.5) and make sure you install npcap with the compatible API option in the installer enabled.
It works fine with Snort 2.9.18.

blocks|key|2697949|text|您应该使用与已安装版本相同的snortrules_snapshort版本示例:带有snortrules的Snort_2_9_8_3_Installer.exe+-快照-2983.tar.gz|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2697950|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You should use snortrules_snapshort version same with installed version
Example: Snort_2_9_8_3_Installer.exe with snortrules-snapshot-2983.tar.gz

blocks|key|3534603|text|如果您正在使用winpcap，那么可以使用npcap进行尝试，您可以从nmap.org下载它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3534604|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

If you are using winpcap then try it using npcap , which you can download from nmap.org

blocks|key|2149062|text|Libpcap最初没有能够传输数据包的功能。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2149063|WinPcap添加了pcap_sendpacket()函数。|offset|length|style|CODE|2149064|OpenBSD添加了pcap_inject()函数。|2149065|在某种程度上，为了与WinPcap和OpenBSD的libpcap兼容，这两种功能都被添加到libpcap中。Linux/*BSD/Solaris/Windows至少支持它们。|2149066|WinPcap获得了带有pcap_inject()的libpcap版本，但这是pcap_inject()，默认情况下，DLL中的函数对DLL用户不可用；必须将它们显式标记为可用(导出)。WinPcap开发人员没有将pcap_inject()标记为可用，因此使用它的程序将无法与WinPcap一起工作。|2149067|显然，Snort选择使用pcap_inject()而不是pcap_sendpacket()；没有充分的理由选择其中一种。|2149068|Libpcap后来使用了一种不同的方案来指示函数是否可用；它默认为UN*X和windows上“只有显式标记为可用的函数”，并且pcap_inject()和pcap_sendpacket()都标记为可用。|2149069|Npcap是基于最新版本的libpcap，因此它使pcap_inject()和pcap_sendpacket()都可用，因此它应该可以使用Snort。|2149070|entityMap^0|0|A|H|0|A|D|0|0|C|D|13|D|2Z|D|0|C|D|S|H|0|1R|D|25|H|0|P|D|13|H|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|W|8|@$D|X|E|Y|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|Z|8|@$D|10|E|11|F|G]]|9|@]|A|$]]|$1|J|3|K|5|6|7|12|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|13|8|@$D|14|E|15|F|G]|$D|16|E|17|F|G]|$D|18|E|19|F|G]]|9|@]|A|$]]|$1|N|3|O|5|6|7|1A|8|@$D|1B|E|1C|F|G]|$D|1D|E|1E|F|G]]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1F|8|@$D|1G|E|1H|F|G]|$D|1I|E|1J|F|G]]|9|@]|A|$]]|$1|R|3|S|5|6|7|1K|8|@$D|1L|E|1M|F|G]|$D|1N|E|1O|F|G]]|9|@]|A|$]]|$1|T|3|-4|5|6|7|1P|8|@]|9|@]|A|$]]]|U|$]]

Libpcap originally had no functions that could transmit packets.
WinPcap added the <code>pcap_sendpacket()</code> function.
OpenBSD added the <code>pcap_inject()</code> function.
At some point, both of those were added to libpcap, for compatibility with both WinPcap and OpenBSD's libpcap. They're both supported on Linux/*BSD/Solaris/Windows at minimum.
WinPcap picked up a version of libpcap that had <code>pcap_inject()</code>, but this is Windows, where functions in a DLL are not made available to users of the DLL by default; they have to be explicitly marked as available (exported). The WinPcap developers did not mark <code>pcap_inject()</code> as available, so programs that use it won't work with WinPcap.
Snort apparently chose to use <code>pcap_inject()</code> rather than <code>pcap_sendpacket()</code>; there's no good reason to choose one or the other.
Libpcap later went with a different scheme for indicating whether a function is available or not; it defaults to &quot;only functions explicitly marked as available are&quot; on both UN*X and windows, and both <code>pcap_inject()</code> and <code>pcap_sendpacket()</code> are marked as available.
Npcap is based on a recent version of libpcap, and thus it makes both <code>pcap_inject()</code> and <code>pcap_sendpacket()</code> available, so it should work with Snort.

I try to experiment the Intrusion Detection System(IDS) using Snort,I installed Snort and WinPcap packages after that I copy the Rules file and paste it to &quot;C:\Snort\rules&quot; next I try to copy the &quot;snort.conf&quot; to &quot;C:\Snort\etc&quot; but it already exists, then I start to execute using snort -dev i 3 it shows a alert message The procedure entry point pcap_inject could not be located in the dynamic link library C:\Snort\bin\snort.exe.
Picture of this problem:
<img src="https://i.stack.imgur.com/hq9Hh.png" alt="" />

Snort pcap_inject not located

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我尝试使用Snort进行入侵检测系统的实验，然后我安装了Snort和WinPcap包，然后复制规则文件并将其粘贴到"C:\Snort\ Rules“，然后尝试将"snort.conf”复制到"C:\Snort\etc“，但它已经存在，然后我开始使用snort -dev I 3执行。它显示了一条警告消息：过程入口点pcap_inject无法位于动态链接库C：\Snort\bin\snort.exe中

问Snort pcap_inject未定位
EN

回答 4

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Snort pcap_inject未定位EN

回答 4

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Snort pcap_inject未定位
EN