[Snort-users] Problems with True64

Mike Meredith mike.meredith at ...1847...
Thu Apr 19 09:26:44 EDT 2001


-----BEGIN PGP SIGNED MESSAGE-----

Hi

On Thursday 19 April 2001 13:43, you wrote:
>    I know I'm going to sound like a broken record, but I'm lost with
> this. I have not been able to install snort-1.7 on any Dec Alpha
> True64.  The current, using 5.01 (with latest patches). It won't even
> compile.  But the funny this is snort-1.6.3 complies and works.  Of
> course it won't catch a fly , ran nmap2.53 -sT "nothing" was record
> expect ARP.  

Don't know about the compile problems, but the lack of alerts sounds 
like you haven't configured the packet filter stuff. Try a "pfconfig 
tu0" (replace tu0 with your interface name) and see what it says.

You will probably have to turn on promiscous mode and copyall mode 
("pfconfig tu0 +promisc +copyall"). If you haven't configured a kernel 
with the packet filters enabled, you will also have to do that.

- -- 
mike.meredith at ...1847...                http://www.iso.port.ac.uk/~mike
Senior Informatics Officer (Postmaster, Hostmaster, and security)

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1i

iQCVAwUBOt7nlM19DFC51SfFAQEHmwP/c3evzvtj0SD5jagG8XTUHIeuszKYElSP
TAP8iau/LGo5fUiLcYk7K7rYWnhDX7G6QXsG3pd4U4LshiWvA3rH77aETt/i3XBW
8cS1SoXhnfDSULRad8cU11BajCfjxhf2OvbIyshJCwVBo0S7M1XFjxL+BT3q/foP
QdzSjw7+4eA=
=Cmhh
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list