Snort mailing list archives

Re: flexresp issues


From: "Jon Baer" <security () jonbaer net>
Date: Fri, 22 Aug 2003 13:28:57 -0400

you may need to upgrade the libnet packet ...

speaking of which there seems to be 2 ports of:

http://libnet.sourceforge.net/
http://www.packetfactory.net/projects/libnet/

can anyone explain which one was *meant* for snort?

- jon

----- Original Message -----
From: "F.M. Taylor" <root () uranium indstate edu>
To: <snort-users () lists sourceforge net>
Sent: Friday, August 22, 2003 12:58 PM
Subject: [Snort-users] flexresp issues



I *just* upgraded from ver 1.8 to ver 2.0.1

compiled with --with-flexresp

everything compiled fine and runs.  Except for flexresp.

I haave two interfaaces on the box eth0 is my g'zinta from my span port
and eth1 is my g'zouta to my switch.  eth0 has no ip address.

I keep getting "Can't respond to IP protocol rules".

What more do you need to know, what aam I doing wrong?

Kerneel is 2.2.13, do I *need* to upgrade it?

--




-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click
here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: