[Snort-users] snort on Linux works, on OpenBSD doesn\\\'t

donegan at ...3789... donegan at ...3789...
Tue Nov 6 13:35:01 EST 2001


Well, tried both of your suggestions. Neither appears to work :-( The
linux snort just keeps on reporting items and the openbsd one remains
mute...


On 11-06-2001 11:46 am, Chris Eidem <jceidem at ...2191...> wrote:

> Not necessary, here is my setup:
> 
> [root at ...3953... /home/ceidem/src]# for i in /etc/hostname.*; do echo
$i;
> cat $i; done
> /etc/hostname.fxp0
> up
> /etc/hostname.xl0
> inet 10.70.0.108 255.255.255.0 NONE 
> /etc/hostname.xl1
> up
> 
> > -----Original Message-----
> > From: Ashley Thomas [mailto:athomas at ...3539...]
> > Sent: Tuesday, November 06, 2001 1:08 PM
> > To: donegan at ...3789...
> > Cc: snort-users at lists.sourceforge.net
> > Subject: Re: [Snort-users] snort on Linux works, on OpenBSD
doesn\\\'t
> > 
> > 
> > One point to be noted:
> > in OpenBSD ifconfig rl0 up does\'nt seem to work.
> > 
> > So modify /etc/hostname.rl0
> > 
> > inet 0.0.0.0 255.255.255.0 NONE
> > 
> > That should do the trick :-)
> > 
> > let me know if that works
> > 
> > cheers
> > ashley
> > 
> > 
> > On Tue, 6 Nov 2001 donegan at ...3789... wrote:
> > 
> > > I have just installed, from the same sources, snort on Linux and
> > > OpenBSD. Both compile AOK, both appear to execute OK, the 
> > Linux snort
> > > catches all the nimda stuff that continues to provide test 
> > data :-) and
> > > the OpenBSD snort catches nothing. Both are connected to 
> > the same hub
> > > (not switch), both interfaces show PROMISC mode and UP.
> > >
> > > A key difference here is that the OpenBSD snort is running on an
> > > interface that has no IP address - i.e. ifconfig rl0 up.
> > >
> > > Any pointers on waking the OpenBSD version up would be
appreciated.
> > >
> > > Thanks!
> > >
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users at lists.sourceforge.net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> > 
> > 
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > 
> 
> 




More information about the Snort-users mailing list