Re: Help Needed: Having a problem with sebek server

[Pierre LALET <lalet () enseirb fr>]

Hello,

Turner,Robbin J. wrote:
> I was trying to extract the data from a tcpdump stream and the 
> sbk_extract is giving me a malformed sebek record error.  The data is 
> coming off a Debian honeypot into a RedHat box running tcpdump.  Then 
> I'm piping the tcpdump output into the sbk_extract and getting the 
> following:
> [SNIP]

The question might be stupid, but let's go : is the server's interface 
an ethernet device ? If no, I thing the server does not work (well I 
could not manage to make it work on a ppp device).

pierre



--
Pierre LALET -- Droids Corporation
lalet () enseirb fr -- http://www.enseirb.fr/~lalet
Clé publique PGP : http://www.enseirb.fr/~lalet/pierre_lalet.asc
Empreinte de la clé : B6B8 0F89 2220 DF8B 0F3B  C0C0 773E 15E6 A878 FC7E

Attachment: _bin
Description: