[Snort-users] run sneeze

Kevin Johnson kjohnson at ...12400...
Mon Aug 7 07:31:37 EDT 2006

On Aug 7, 2006, at 4:21 AM, Jesús Gálvez wrote:

> I have configurated snort, and now i want to test it, trigering  
> falses positives with sneeze. So when I execute the script i got  
> the next output:
> Can't locate Net/RawIP.pm in @INC (@INC contains: /usr/lib/ 
> perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /usr/lib/ 
> perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/ 
> site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/ 
> 5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0 /usr/ 
> lib/perl5/vendor_perl /usr/lib/perl5/5.8.0/i386-linux-thread-multi / 
> usr/lib/perl5/5.8.0 .) at ./sneeze.pl line 20.
> BEGIN failed--compilation aborted at ./sneeze.pl line 20.
> Anybody can help me?
> P.D.: Also I would like to find some sneeze examples, I don´t have  
> found enough "googling". Thanks.


You do not have Net::RawIP installed.  Check out cpan and install it.

BASE Project Lead
The next step in IDS analysis!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20060807/27672bfe/attachment.html>

More information about the Snort-users mailing list