RE: Sebek 0.4

["Andrew Hintz \(Drew\)" <drew () overt org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Dan,

It appears that the Sebek loadable kernel modules (LKMs) are not
being loaded correctly.  As root, run
/sbin/insmod /tmp/sebek/adore.o
and take a look at the output.  Hopefully it will give you some
insight as to why the LKM can not be loaded properly.  Also, be sure
to verify the following:
   - You are running ./sebek as root.
   - LKMs are enabled in your kernel.
   - Sebek was compiled for the kernel version that is on your
honeypot.

HTH,
- --
^Drew

http://guh.nu

- --Begin PGP Fingerprint--
3C6C F712 0A52 BD33 C518  5798 9014 CA99 2DA0 5E78
- --End PGP Fingerprint--


- -----Original Message-----
From: Dan [mailto:honey197201 () yahoo com]
Sent: Tuesday, December 03, 2002 8:28 PM
To: honeypots () securityfocus com
Subject: Sebek 0.4


Hi,
   I am trying to install sebek, however when i enter ./sebek start,
these are displayed :
rmmod: module cleaner is not loaded
Couldn't authorize myself. Trying anyway ...
Potential sebek config/version mismatch...
File '/tmp/sebek/adore.o' hided.
<snip>

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPe2D0JAUypktoF54EQJJOgCdG1I8AVlXApvHXbCpWFVaktign7EAnj32
QAYgIU77PV1TZiht1MXjOd4b
=azSN
-----END PGP SIGNATURE-----