[Snort-users] eri* on Netra's

Bill Marquette wlmarque at ...8...
Fri May 4 14:08:44 EDT 2001



To break out to boot roms via serial connection try to send a "break".  what you
probably need to bring that second NIC online is to plumb the interface.  I'll
assume both are identical, try to "ifconfig eri1 plumb"; for just plain sniffing
that's all you'll need to do to get snort to attach to it.

--Bill



From: Kevin Brown <Kevin.M.Brown at ...1022...> on 05/04/2001 12:25 PM

To:   "'snort-users at lists.sourceforge.net'" <snort-users at lists.sourceforge.net>
cc:
Client:
Subject:  [Snort-users] eri* on Netra's



OK, I don't know where else to take this problem.  I have a Netra T1 that I
am configuring for use for snort.  It has 2 100Mb NICs, but for some reason
I can only configure eri0.  Solaris does not see the second interface and I
haven't found a way to stop-A the box from a serial session to see if I can
get it configured from there.  I have everything else ready to go on this
box (snort/postgres are compiled), just need the second interface up for
listening and this will go out into the field for testing.  Of course the
Sun experts here at work are all gone on Flex or Vacation, so no help from
that end and searching the web didn't bring up any relevant hits.  Any
ideas?

Begin Geek Code;
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map{$_%16or$t^=$c
^=(
$m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;$t^=(72, at z=(64,72,$a^=12*($_%
16
-2?0:$m&17)),$b^=$_%64?12:0, at z)[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$
h
=5;$_=unxb24,join"", at b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$
d=unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d>>12^$d>>4^
$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*8^$q<<6))<<9,$_=$t[$_]^
(($h>>=8)+=$f+(~$g&$t))for at ...1981...[128..$#a]}print+x"C*", at a}';s/x/pack+/g;eval

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20010504/3f647ffe/attachment.htm>


More information about the Snort-users mailing list