[Snort-users] Problems with True64
mike.meredith at ...1847...
Thu Apr 19 09:26:44 EDT 2001
-----BEGIN PGP SIGNED MESSAGE-----
On Thursday 19 April 2001 13:43, you wrote:
> I know I'm going to sound like a broken record, but I'm lost with
> this. I have not been able to install snort-1.7 on any Dec Alpha
> True64. The current, using 5.01 (with latest patches). It won't even
> compile. But the funny this is snort-1.6.3 complies and works. Of
> course it won't catch a fly , ran nmap2.53 -sT "nothing" was record
> expect ARP.
Don't know about the compile problems, but the lack of alerts sounds
like you haven't configured the packet filter stuff. Try a "pfconfig
tu0" (replace tu0 with your interface name) and see what it says.
You will probably have to turn on promiscous mode and copyall mode
("pfconfig tu0 +promisc +copyall"). If you haven't configured a kernel
with the packet filters enabled, you will also have to do that.
mike.meredith at ...1847... http://www.iso.port.ac.uk/~mike
Senior Informatics Officer (Postmaster, Hostmaster, and security)
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1i
-----END PGP SIGNATURE-----
More information about the Snort-users