This is a discussion on RE: [Snort-users] Problems with Snort on SuSE Linux 9.1 (Kernel 2.6) within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. ------=_NextPart_000_0011_01C44F1A.AC138180 Content-Type: text/plain; charset="us-ascii" ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
This is a multi-part message in MIME format.
------=_NextPart_000_0011_01C44F1A.AC138180 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Let me see if I can find anything out on this on the internal websites. = I'm not currently running this combination. =20 Tom Fulton, CISSP Sr. Systems Engineer Novell/SuSE Linux San Jose, CA Mobile: 408-802-0948 (Primary) =20 =20 -----Original Message----- From: snort-users-admin@lists.sourceforge.net [mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Eric Hines Sent: Thursday, June 10, 2004 5:28 PM To: snort-users@lists.sourceforge.net Subject: [Snort-users] Problems with Snort on SuSE Linux 9.1 (Kernel = 2.6) All, =20 We are having customers reporting Snort 2.1.1 not working on SuSE Linux = 9.1. When trying to start Snort, they report a Fatal Error message from pcap. =20 Is anyone aware of a bugfix that may have been made in 2.1.1 -> 2.1.3? = Or has anyone on this list seen the same problems when using SuSE 9.1, = kernel 2.6 and Snort? =20 Is it a problem introduced with the 2.6 kernel in Snort or is it pcap? =20 Thanks, =20 Eric Hines CEO, President Applied Watch Technologies, Inc. http://www.appliedwatch.com =20 ------=_NextPart_000_0011_01C44F1A.AC138180 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3DUS-ASCII"> <TITLE>Message</TITLE> <META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><SPAN class=3D056504001-11062004><FONT face=3DArial color=3D#0000ff = size=3D2>Let me=20 see if I can find anything out on this on the internal websites. = I'm not=20 currently running this combination.</FONT></SPAN></DIV> <DIV><SPAN class=3D056504001-11062004><FONT face=3DArial color=3D#0000ff = size=3D2></FONT></SPAN> </DIV> <DIV><SPAN class=3D056504001-11062004><!-- Converted from text/rtf = format --> <P><SPAN lang=3Den-us><FONT face=3DArial size=3D2>Tom Fulton, = CISSP<BR>Sr.</FONT>=20 <FONT face=3DArial size=3D2>Systems Engineer</FONT><BR><FONT = face=3DArial=20 size=3D2>Novell</FONT><FONT face=3DArial size=3D2>/SuSE = Linux</FONT><BR><FONT=20 face=3DArial size=3D2>San Jose, CA<BR>Mobile: 408-802-0948=20 (Primary)<BR></FONT></SPAN> <BR><SPAN lang=3Den-us><FONT=20 face=3DArial> </FONT></SPAN> </P></SPAN></DIV> <BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px"> <DIV></DIV> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr = align=3Dleft><FONT=20 face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B>=20 snort-users-admin@lists.sourceforge.net=20 [mailto:snort-users-admin@lists.sourceforge.net] <B>On Behalf Of = </B>Eric=20 Hines<BR><B>Sent:</B> Thursday, June 10, 2004 5:28 PM<BR><B>To:</B>=20 snort-users@lists.sourceforge.net<BR><B>Subject:</B> [Snort-users] = Problems=20 with Snort on SuSE Linux 9.1 (Kernel 2.6)<BR><BR></FONT></DIV> <DIV><FONT face=3DArial size=3D2>All,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>We are having customers reporting = Snort 2.1.1 not=20 working on SuSE Linux 9.1. When trying to start Snort, they report a = Fatal=20 Error message from pcap.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Is anyone aware of a bugfix that may = have been=20 made in 2.1.1 -> 2.1.3? Or has anyone on this list seen the same = problems=20 when using SuSE 9.1, kernel 2.6 and Snort?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Is it a problem introduced with the = 2.6 kernel in=20 Snort or is it pcap?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Thanks,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Eric Hines</FONT></DIV> <DIV><FONT face=3DArial size=3D2>CEO, President</FONT></DIV> <DIV><FONT face=3DArial size=3D2>Applied Watch Technologies, = Inc.</FONT></DIV> <DIV><FONT face=3DArial size=3D2><A=20 = href=3D"http://www.appliedwatch.com">http://www.appliedwatch.com</A></FON= T></DIV> <DIV><FONT face=3DArial = size=3D2></FONT> </DIV></BLOCKQUOTE></BODY></HTML> ------=_NextPart_000_0011_01C44F1A.AC138180-- ------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |