[Snort-users] snort 1.7 on HP-UX 10.20 with DLPi problems

Karl Lovink karl at ...501...
Sat Jan 13 17:27:22 EST 2001

I'am trying to run snort 1.7 on my HP-UX 10.20 box. We recently upgraded the
lan from 10MB to 100MB and
now we are using the btlan1 driver for HP-UX. This driver is a dlpi driver
so no /dev/lan stuf but
you need to use /dev/dlpi<x>.

First I found out that on HP-UX 10.20 the <x> should be replaced by the NMID
of the driver.
You can get that from lanscan. But of course that didn't help.

I get the following error messages:

apiccu69 # lanscan
Hardware Station        Crd Hardware Net-Interface   NM  MAC        HP DLPI
Path     Address        In# State    NameUnit State  ID  Type       Support
10/4/16  0x1000904B8C72 1   UP       lan1     UP     4   ETHER      Yes
10/12/6  0x080009DA48C8 0   UP       lan0     DOWN   5   ETHER      Yes
apiccu69 # ./snort -dev -i dlpi4 2>&1 | more
ERROR: OpenPcap() device dlpi4 open:
        can't find /dev/dlpi PPA for dlpi4

        --== Initializing Snort ==--

Initializing Network Interface dlpi4

The libpcap version I'am using is 0.6 and got it from www.tcpdump.org

Any other suggestions?


More information about the Snort-users mailing list