[Oisf-users] Install Suricata on Win 10 with Npcap?

[Thomas Drebert]

Hello,

sorry, but this doesn't work for me. I get always this error:
"The procedure entry point "pcap_dump_fopen" was not found in the DLL
"C: \ Program Files \ Suricata \ suricata.exe".
This is my Suricata Directory:
01.05.2019  19:46    <DIR>          .
01.05.2019  19:46    <DIR>          ..
21.01.2012  17:39                36 batch.bat
07.03.2019  04:38             4.167 classification.config
01.05.2019  19:46                 0 dirout.txt
28.08.2018  03:01           169.631 HOW_TO_Windows.pdf
18.01.2018  04:22           232.340 libGeoIP-1.dll
25.04.2018  23:33            79.194 libjansson-4.dll
10.05.2018  02:24           121.058 liblz4.dll
02.05.2018  10:46           154.319 liblzma-5.dll
11.04.2018  23:47           313.828 libnspr4.dll
30.07.2018  16:02         1.928.216 libpcre-1.dll
11.04.2018  23:47            28.974 libplc4.dll
11.04.2018  23:47            22.901 libplds4.dll
16.07.2018  01:28            57.317 libwinpthread-1.dll
30.07.2018  16:04           783.396 libyaml-0-2.dll
20.01.2012  17:17            17.987 LICENSE
01.05.2019  17:14    <DIR>          log
27.09.2017  22:03           244.502 lua53.dll
25.07.2018  22:28         5.305.856 magic.mgc
16.07.2016  06:18           634.824 msvcrt.dll
27.06.2018  12:39         1.259.688 nss3.dll
27.06.2018  12:39           163.061 nssutil3.dll
07.03.2019  04:38             1.375 reference.config
01.05.2019  17:16    <DIR>          rules
10.03.2019  08:27        49.719.350 suricata.exe
28.08.2018  03:04            68.046 suricata.yaml
03.08.2018  02:51            23.552 WinDivert.dll
03.08.2018  02:51            50.592 WinDivert64.sys
27.04.2019  23:00           387.384 wpcap.dll
19.07.2018  05:33            93.208 zlib1.dll
              27 Datei(en),     61.864.802 Bytes

If I start Suricata by click on the icon, a cmd window is open and an
error window is popup.
I use the last msi from the Download Site.

regards
Thomas D.

Am Mi., 1. Mai 2019 um 18:48 Uhr schrieb Peter Manev <petermanev at gmail.com>:
>
> On Wed, May 1, 2019 at 5:21 PM Thomas Drebert <drebert at web.de> wrote:
> >
> > Hello,
> >
> > I make some tests, it is not a Npcap problem, I uninstall Npcap and
> > Suricata, reboot and install Suricata again. But I have the same
> > Error:
> > "The procedure entry point "pcap_dump_fopen" was not found in the DLL
> > "C: \ Program Files \ Suricata \ suricata.exe".
> >
>
> You need npcap/wpcap.dll in the same folder or in the System Path
> You could also try our msi pkg - https://suricata-ids.org/download/ -
> should work right out of the box installation.
> (the newer stable will be out soon)
>
> > regards
> > Thomas D.
> >
> > Am Di., 30. Apr. 2019 um 19:05 Uhr schrieb Thomas Drebert <drebert at web.de>:
> > >
> > > Hello,
> > >
> > > I try to install Suricata on Windows 10, but I have installed the Npcap Driver and I get the wpcap.dll error, I try Npcap install in WinPcap API Mode, but now I get this Error "pcap_dump_fopen".
> > > What can I do?
> > >
> > > regards
> > > ThomasD
> > _______________________________________________
> > Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> > Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> > List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >
> > Conference: https://suricon.net
> > Trainings: https://suricata-ids.org/training/
>
>
>
> --
> Regards,
> Peter Manev