RE: snort on Linux works, on OpenBSD doesn\'t

[Ashley Thomas <athomas () unity ncsu edu>]

Could you explain what you are doing.

thanks
ashley

On Tue, 6 Nov 2001, Chris Eidem wrote:

> Not necessary, here is my setup:
>
> [root@cubanelle /home/ceidem/src]# for i in /etc/hostname.*; do echo $i;
> cat $i; done
> /etc/hostname.fxp0
> up
> /etc/hostname.xl0
> inet 10.70.0.108 255.255.255.0 NONE
> /etc/hostname.xl1
> up
>
> > -----Original Message-----
> > From: Ashley Thomas [mailto:athomas () unity ncsu edu]
> > Sent: Tuesday, November 06, 2001 1:08 PM
> > To: donegan () donegan org
> > Cc: snort-users () lists sourceforge net
> > Subject: Re: [Snort-users] snort on Linux works, on OpenBSD doesn\'t
> >
> >
> > One point to be noted:
> > in OpenBSD ifconfig rl0 up does'nt seem to work.
> >
> > So modify /etc/hostname.rl0
> >
> > inet 0.0.0.0 255.255.255.0 NONE
> >
> > That should do the trick :-)
> >
> > let me know if that works
> >
> > cheers
> > ashley
> >
> >
> > On Tue, 6 Nov 2001 donegan () donegan org wrote:
> >
> > > I have just installed, from the same sources, snort on Linux and
> > > OpenBSD. Both compile AOK, both appear to execute OK, the
> > Linux snort
> > > catches all the nimda stuff that continues to provide test
> > data :-) and
> > > the OpenBSD snort catches nothing. Both are connected to
> > the same hub
> > > (not switch), both interfaces show PROMISC mode and UP.
> > >
> > > A key difference here is that the OpenBSD snort is running on an
> > > interface that has no IP address - i.e. ifconfig rl0 up.
> > >
> > > Any pointers on waking the OpenBSD version up would be appreciated.
> > >
> > > Thanks!
> > >
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users