Snort mailing list archives

RE: eri* on Netra's


From: Kevin Brown <Kevin.M.Brown () asu edu>
Date: Fri, 04 May 2001 11:31:38 -0700

The first interface that got configured by the system came up as eri0.  This
is a Netra T1 AC200, don't know if others have different NICs.  Looking into
/etc/path_to_inst shows two instances of the eri driver being loaded, let's
see where this takes me with the sun docs.

-----Original Message-----
From: Aaron Gee-Clough [mailto:aaron.gee-clough () digex com]
Sent: Friday, May 04, 2001 11:28
To: Kevin Brown
Subject: Re: [Snort-users] eri* on Netra's


I've been running snort on Netra T1's for a while, and the Ethernet
interfaces on them are both hme<n>.  You sure about that eri bit?  I'd try
hme0 and hme1.

Aaron

At 10:25 AM 5/4/01 -0700, Kevin Brown wrote:

OK, I don't know where else to take this problem.  I have a Netra T1 that I
am configuring for use for snort.  It has 2 100Mb NICs, but for some reason
I can only configure eri0.  Solaris does not see the second interface and I
haven't found a way to stop-A the box from a serial session to see if I can
get it configured from there.  I have everything else ready to go on this
box (snort/postgres are compiled), just need the second interface up for
listening and this will go out into the field for testing.  Of course the
Sun experts here at work are all gone on Flex or Vacation, so no help from
that end and searching the web didn't bring up any relevant hits.  Any
ideas?

Begin Geek Code; 
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map{$_%16or$t^=$
c^=( 
$m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;$t^=(72,@z=(64,72,$a^=12*($_
%16 
-2?0:$m&17)),$b^=$_%64?12:0,@z)[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){
$h 
=5;$_=unxb24,join"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;
$ 
d=unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d>>12^$d>>4^

$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*8^$q<<6))<<9,$_=$t[$_]^ 
(($h>>=8)+=$f+(~$g&$t))for@a[128..$#a]}print+x"C*",@a}';s/x/pack+/g;eval 

----------------------------------------------------
Aaron Gee-Clough
Digex Systems Security Operations

Current thread: