Re: Corrupted Frame and Exit

[Mike Dillinger <miked () softtalker com>]

--- Original Message
From: Nathaniel Richmond <nate+snort () richmond-family org>
Sent: Monday, March 16, 2009, at 05:06AM PDT (GMT -0700)

NR> If the error is about the libpcap headers, you may not have the
NR> libpcap-dev package installed. It might help to paste the exact
NR> error for the list.

I did/do have libpcap-dev installed.

Here is the error again:
rockenfield:~# tcpdump -vv -i eth3
tcpdump: listening on eth3, link-type EN10MB (Ethernet), capture size 96 bytes
09:22:26.123716 Broadcast Unknown SSAP 0xe6 > 00:00:00:00:00:00 (oui Ethernet) NetBeui Information, send seq 33, rcv 
seq 46, Flags [Final], length 4294967282
tcpdump: pcap_loop: corrupted frame on kernel ring mac offset 94 + caplen 428 > frame len 160
26 packets captured
27 packets received by filter
0 packets dropped by kernel

If there is more information you'd like, let me know and I'll gladly post it.

It looks like this is my problem, which was kindly posted by Matthew Babcock:
http://74.125.95.132/search?q=cache:y-f7nqzgi-cJ:help.lockergnome.com/linux/Bug-517098-libpap-1_i386-broken-64-bit-kernel--ftopict493202.html+pcap_loop:+corrupted+frame+on+kernel+ring&hl=en&ct=clnk&cd=1&gl=us&ie=UTF-8

I am running the amd64 version of the kernel.  I have tried to build libpcap on my own but I'm not the best builder and 
had some problems.  I will contact the Debian folks and see what's going on.

Thanks,
-MikeD

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users