Question SNORT: <dir> and <var> paths ?

[Unluckylucky]

Where should I look for a paths for dir and var in config daq in snort.conf?

I tried to look in SNORT folders and in file explorer but there is nothing close to this.
Screenshot of my configuration file: https://gofile.io/d/vAWYnm

OS: Windows 10

 

[Ralston18]

SNORT being an intrusion prevention system - correct?

Reference:

https://www.snort.org/

https://www.geeksforgeeks.org/what-is-snort/

What is the requirement driving the need to look in SNORT folders and to discover paths?

 

[ex_bubblehead]

I think someone needs to spend more time reading documentation and less time asking such useless questions.

 

[Unluckylucky]

SNORT being an intrusion prevention system - correct?

Reference:

https://www.snort.org/

https://www.geeksforgeeks.org/what-is-snort/

What is the requirement driving the need to look in SNORT folders and to discover paths?

So, when I type "./snort -v" command I get this: "Can't set DAQ BPF Filter"

 

[Ralston18]

Three comments/questions:

1) What is reason for running that command? What are you trying to find?

2) What does documentation say about that "error"?

3) What have you attempted to resolve the failure?

 

[Unluckylucky]

Three comments/questions:

1) What is reason for running that command? What are you trying to find?

2) What does documentation say about that "error"?

3) What have you attempted to resolve the failure?

1. I tried to test snort
2. It can be specified by "bpf_file: <filename>", but I don't have any idea where to get this "<filename>. Maybe I should it create

3. I have tried to find solution in internet (For example: https://www.cisco.com/c/en/us/suppo...nt-center/118090-configure-sourcefire-00.html) and in "README.filters" and I think that I should write these filters. But, again, I don't have any idea about how and where to write it. In the first link there are very abstractional description about instruments which should I use

 

[kanewolf]

So, when I type "./snort -v" command I get this: "Can't set DAQ BPF Filter"

In Linux config files would generally be in a subdirectory under /etc/conf

 

[Unluckylucky]

In Linux config files would generally be in a subdirectory under /etc/conf

So in "./snort" I should write subdirectory?

 

[kanewolf]

So in "./snort" I should write subdirectory?

No. One of your questions was where is the config file? I answered that question.
How was snort installed? APT INSTALL?

 

[Unluckylucky]

No. One of your questions was where is the config file? I answered that question.
How was snort installed? APT INSTALL?

What is APT? I also installed for Snort WinPcap and npcap

 

[kanewolf]

What is APT? I also installed for Snort WinPcap and npcap

What OS are you running this? I assumed Linux because of the "./"

 

[Unluckylucky]

What OS are you running this? I assumed Linux because of the "./"

Windows 10

 

[kanewolf]

Windows 10

I have no clue where things are installed in Windows.