Honeypots mailing list archives

Re: Sebek client-linux compile problem


From: renard.olivier9 () free fr
Date: 8 Jun 2006 11:21:12 -0000


   Yes, this rejected patch prove you are installing sebek linux modules under the wrong kernel sources for modules !  
Sebek linux client 2.1 is made for kernel 2.4 modules. For a kernel 2.6, you have to compile the sebel linux 3.0. You 
can get it under the honeypot official site.  
   It sometimes doesn't works in depend if libraries installed. For honeyd server you need the last libdnet ( v 1.8 or 
higher ) and the libpython 2.3 installed. Still there are problems within C ansi variable definitions. Depend on the 
hardware infrastructure. Does an unsigned long is 32 bits or 64 bits on your hardware ? The net modules of sebek 
defines unsigned 32 bits varia -bles without checking.
 
       It's a problem still in development, I believe on their site. In fact, NSA as allready integrated it under their 
secure linux project. Usualy, it patches the kernel modules before all daemons and clients install for security.

        O.A.Renard


Current thread: