Honeypots mailing list archives

Re: Honeynet Project Honeywall update breakage


From: "Earl Sammons" <esammons () hush com>
Date: Thu, 23 Feb 2006 15:12:55 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

Ive filed a bugzilla report at:
https://bugs.honeynet.org/show_bug.cgi?id=423

If my fix(es) dont work or there is more breakage than I
found/fixed please post your findings in bugzilla.

Once again, sorry about any inconvenience.

Earl

Here is how to fix it depending on where your Honeywall is:

Determin snort/snort-mysql version
==================================
 'rpm -q snort; rpm -q snort-mysql'

If you get the following output use "Soultion #1" below.
snort-2.3.3-1.hw
snort-mysql-2.3.3-1.hw

If you get any other version output (like snort-2.4.3-*.fc3) use
"Solution #2" below

Solution #1
===========
o Update roo-base so you will no longer receive incompatible
snort/snort-mysql
updates
 'yum update roo-base'
You can now safely run 'yum update'

Solution #2
===========
o Update roo-base so you will no longer receive incompatible
snort/snort-mysql
updates
 'yum update roo-base'

o Get rid of the incompatible versions of snort/snort-mysql
 'rpm -e --nodeps snort snort-mysql'

o Put the correct snort/snort-mysql RPMS back in place
 'yum install snort snort-mysql'

o Reboot
 'init 6'

Watch closely to be sure everything starts up correctly (No "Red
Failure" messages)

DSTL:  Please verify above solution and make "Closed" if you agree
this fixes
the problem.




On Thu, 23 Feb 2006 13:07:37 -0500 Earl Sammons <esammons () hush com>
wrote:
All,

Problem:
running 'yum update' breaks snort/snort-mysql on all versions of
the Honeynet Project "roo" Honeywall.

Fix: In the works

Temp Solution: Hold off on updating the Honeywall... Fix and more
details on the way.

Sorry about any inconveniance.

Earl Sammons

-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkP+K6kACgkQk7+e+4lPSm1aHgCgkk2co+/kBqomXj7ydnrH60D6sxYA
n1utd9FjN31EaqaRYWmMajvf6fTE
=tBpV
-----END PGP SIGNATURE-----



Current thread: