Snort mailing list archives

Re: eri* on Netra's


From: "Bill Marquette" <wlmarque () hewitt com>
Date: Fri, 4 May 2001 13:08:44 -0500



To break out to boot roms via serial connection try to send a "break".  what you
probably need to bring that second NIC online is to plumb the interface.  I'll
assume both are identical, try to "ifconfig eri1 plumb"; for just plain sniffing
that's all you'll need to do to get snort to attach to it.

--Bill



From: Kevin Brown <Kevin.M.Brown () asu edu> on 05/04/2001 12:25 PM

To:   "'snort-users () lists sourceforge net'" <snort-users () lists sourceforge net>
cc:
Client:
Subject:  [Snort-users] eri* on Netra's



OK, I don't know where else to take this problem.  I have a Netra T1 that I
am configuring for use for snort.  It has 2 100Mb NICs, but for some reason
I can only configure eri0.  Solaris does not see the second interface and I
haven't found a way to stop-A the box from a serial session to see if I can
get it configured from there.  I have everything else ready to go on this
box (snort/postgres are compiled), just need the second interface up for
listening and this will go out into the field for testing.  Of course the
Sun experts here at work are all gone on Flex or Vacation, so no help from
that end and searching the web didn't bring up any relevant hits.  Any
ideas?

Begin Geek Code;
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map{$_%16or$t^=$c
^=(
$m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;$t^=(72,@z=(64,72,$a^=12*($_%
16
-2?0:$m&17)),$b^=$_%64?12:0,@z)[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$
h
=5;$_=unxb24,join"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$
d=unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d>>12^$d>>4^
$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*8^$q<<6))<<9,$_=$t[$_]^
(($h>>=8)+=$f+(~$g&$t))for@a[128..$#a]}print+x"C*",@a}';s/x/pack+/g;eval


Current thread: