honeypot

[<thetic_1900 () hotmail com>]

i would like to know can i setup my honeypot on a production network where i
have a switch

since a switch controls broadcast and say i have my honeypot setup and i
have a snort setup as well
how can i make sure all traffic is destined to touch the snort system in
addition to the honepot

******

any advice is most appreciated     :    )




----- Original Message -----
From: "Rick S." <rsheppar () midnight ecet vtc edu>
To: <honeypots () securityfocus com>
Sent: Wednesday, August 13, 2003 5:05 PM
Subject: Sebek 2 compile issue


> Hello,
> Im having a bit of trouble compiling Sebek 2.0.1 for linux. Im using
> gentoo with the 2.4.20-r6-gentoo kernel. I have read  the other threads
> about this. I have changed the include dir and the  tar varibles in  the
> makefile but I am left with an error:
>
> /usr/src/linux/include/asm/hw_irq.h: In function `x86_do_profile':
> /usr/src/linux/include/asm/hw_irq.h:213: `current' undeclared (first use
> in this function)
> /usr/src/linux/include/asm/hw_irq.h:213: (Each undeclared identifier is
> reported only once
> /usr/src/linux/include/asm/hw_irq.h:213: for each function it appears in.)
> make: *** [sebek] Error 1
>
> any assistance would be helpful, thank you.
>
> Rick S.