[Snort-users] snort 1.7 on HP-UX 10.20 with DLPi problems

Martin Roesch roesch at ...421...
Thu Jan 18 01:58:44 EST 2001


No idea, it might be a good idea to talk to the tpcdump.org/libpcap guys
about it, it's really more on their side of things (I think...)

   -Marty

Karl Lovink wrote:
> 
> I'am trying to run snort 1.7 on my HP-UX 10.20 box. We recently upgraded the
> lan from 10MB to 100MB and
> now we are using the btlan1 driver for HP-UX. This driver is a dlpi driver
> so no /dev/lan stuf but
> you need to use /dev/dlpi<x>.
> 
> First I found out that on HP-UX 10.20 the <x> should be replaced by the NMID
> of the driver.
> You can get that from lanscan. But of course that didn't help.
> 
> I get the following error messages:
> 
> apiccu69 # lanscan
> Hardware Station        Crd Hardware Net-Interface   NM  MAC        HP DLPI
> Mjr
> Path     Address        In# State    NameUnit State  ID  Type       Support
> Num
> 10/4/16  0x1000904B8C72 1   UP       lan1     UP     4   ETHER      Yes
> 137
> 10/12/6  0x080009DA48C8 0   UP       lan0     DOWN   5   ETHER      Yes
> 52
> apiccu69 # ./snort -dev -i dlpi4 2>&1 | more
> ERROR: OpenPcap() device dlpi4 open:
>         can't find /dev/dlpi PPA for dlpi4
> 
>         --== Initializing Snort ==--
> 
> Initializing Network Interface dlpi4
> 
> The libpcap version I'am using is 0.6 and got it from www.tcpdump.org
> 
> Any other suggestions?
> 
> Karl
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

--
Martin Roesch
roesch at ...421...
http://www.snort.org




More information about the Snort-users mailing list