devil-linux-discuss Mailing List for Devil-Linux (Page 402)

Hi,

it could be a bug.
>> Mar 25 14:36:13 devil src@Devil snort: ERROR: OpenPcap() FSM
>compilation
>> failed:

Probably there's a library missing or something similar.
I'll try it out, as soon as I have time for that.

cu
  Heiko

On 03/25/2002 09:38:00 AM "Marco Schierle" wrote:
>I thought the same and tested if a fresh config file without changing
>anything works. But I got the same message.
>
>but thanx very much
>marco
>
>
>-----Ursprungliche Nachricht-----
>Von: dev...@li...
>[mailto:dev...@li...]Im Auftrag von=

>Friedrich Lobenstock
>Gesendet: Montag, 25. Marz 2002 15:29
>An: Devil Linux Discuss Mailing Liste
>Betreff: Re: [Devil-Linux-discuss] Is Snort missing something
>
>
>On Mon, 25 Mar 2002 15:12, Marco Schierle wrote:
>
>> eth0: Setting promiscuous mode.
>> Mar 25 14:36:13 devil src@Devil device eth0 entered promiscuous mode=

>> Mar 25 14:36:13 devil src@Devil snort: ERROR: OpenPcap() FSM
>compilation
>> failed:
>> Mar 25 14:36:13 devil src@Devil ^Iparse error
>> Mar 25 14:36:13 devil src@Devil snort: FATAL ERROR: PCAP command:
>> /etc/snort/snort.conf
>> Mar 25 14:36:13 devil src@Devil device eth0 left promiscuous mode
>
>
>I would guess that your config file is not correct but "parse error"
>hints that.
>
>PS: I never used snort before :)


=

I thought the same and tested if a fresh config file without changing
anything works. But I got the same message.

but thanx very much
marco


-----Ursprungliche Nachricht-----
Von: dev...@li...
[mailto:dev...@li...]Im Auftrag von
Friedrich Lobenstock
Gesendet: Montag, 25. Marz 2002 15:29
An: Devil Linux Discuss Mailing Liste
Betreff: Re: [Devil-Linux-discuss] Is Snort missing something


On Mon, 25 Mar 2002 15:12, Marco Schierle wrote:

> eth0: Setting promiscuous mode.
> Mar 25 14:36:13 devil src@Devil device eth0 entered promiscuous mode
> Mar 25 14:36:13 devil src@Devil snort: ERROR: OpenPcap() FSM
compilation
> failed:
> Mar 25 14:36:13 devil src@Devil ^Iparse error
> Mar 25 14:36:13 devil src@Devil snort: FATAL ERROR: PCAP command:
> /etc/snort/snort.conf
> Mar 25 14:36:13 devil src@Devil device eth0 left promiscuous mode


I would guess that your config file is not correct but "parse error"
hints that.

PS: I never used snort before :)

-- 
MfG / Regards
Friedrich Lobenstock


_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

On Mon, 25 Mar 2002 15:12, Marco Schierle wrote:

> eth0: Setting promiscuous mode.
> Mar 25 14:36:13 devil src@Devil device eth0 entered promiscuous mode
> Mar 25 14:36:13 devil src@Devil snort: ERROR: OpenPcap() FSM compilation
> failed:
> Mar 25 14:36:13 devil src@Devil ^Iparse error
> Mar 25 14:36:13 devil src@Devil snort: FATAL ERROR: PCAP command:
> /etc/snort/snort.conf
> Mar 25 14:36:13 devil src@Devil device eth0 left promiscuous mode


I would guess that your config file is not correct but "parse error"
hints that.

PS: I never used snort before :)

-- 
MfG / Regards
Friedrich Lobenstock

Hi,

first the new Beta6 is a great peace of software!

I tried to run the snort package with a small basic configuration. But
on startup snort dies. I see the following in syslog:

eth0: Setting promiscuous mode.
Mar 25 14:36:13 devil src@Devil device eth0 entered promiscuous mode
Mar 25 14:36:13 devil src@Devil snort: ERROR: OpenPcap() FSM compilation
failed:
Mar 25 14:36:13 devil src@Devil ^Iparse error
Mar 25 14:36:13 devil src@Devil snort: FATAL ERROR: PCAP command:
/etc/snort/snort.conf
Mar 25 14:36:13 devil src@Devil device eth0 left promiscuous mode

Is my devil-linux missing something here? Do I have to install
additional packages?

I don't know if it's a snort or devil-linux related problem. Searching
the usenet did not really help.

Any suggestion would be great!

Thanx
marco

Hello everybody,

the long waiting period is over!

I'm proude to announce Release 0.5 Beta 6 of Devil-Linux.

We did a lot of changes and it's time that the public can take a look at it.

Visit our Website to download this release: http://www.devil-linux.org
You find the Changelog at the end of this mail.

Please report any bugs/problems to bu...@de... or on our Website.

We need mirror servers!
When you can provide us with a mirror, please contact me:
he...@de...


-- 

cu
   Heiko

We are Penguin, Resistance is futile!

http://www.devil-linux.org

- added pptpadsl script provided by Eli Marmor
- updated pptp-linux to CVS version (20020318)
- updated iptables to v1.2.6a (including patch-o-matic "base" patches)
- updated shadow to v4.0.3
- updated LVM to v1.0.3
- Kernel: changed QoS Support to be build as modules
- save-config skips the dhcpcd-eth*.pid files now
- rc script doesn't wait for keyboard input when an error occurs
- added procps v2.0.7 to base system
- added less v3.74 to base system
- added Intel NIC driver (e100) v1.8.37
- updated samba to v2.2.3a
- updated reiserfsprogs to v3.x.1b
- updated modutils to v2.4.14
- updated zlib to v1.1.4
- updated XFS to current CVS snapshot for Kernel v2.4.18
- updated FreeS/WAN to 1.96 including X.509 Patch v0.9.9
- updated ntp to v4.1.72
- updated e2fsprogs to v1.27
- updated openssh to v3.1p1
- updated tcpdump to v3.7.1
- updated libpcap to v0.7.1
- chroot jail for bind
- chroot support
- added compartment v1.1 to base system
- restart of daemons works now as expected
- updated shadow to v4.0.2
- added missing user nobody and group nogroup
- added Squid 2.5 PRE 4 as package
- harddisk support (LVM and journaling filesystem needed, howto on 
devil-linux-developer)
- changed startup methode to pivot_root
- startup is much nicer
- added insserv v0.8 to base system
- changed the init system to be more LSB conform
- renamed /etc/init.d/ntpd to xntpd (LSB conform)
- /etc/snmp.conf renamed to /etc/snmpd.conf
- added start script for snmpd
- added Snort (snapshot-stable-20020211) with MySQL support as package
- added Libnet v1.02 to build system
- added MySQL v3.23.48 (Client and Libs) as package
- added jftpgw (ftp proxy) v0.12.2 as package
- added raidtools v20010914 as package
- updated dhcpcd to v1.3.22pl1
- updated syslinux to v1.67
- updated modutils to v2.4.13
- it's now possible to have more then one interface defined for dhcpd
- added Postfix v1.0.3 + TLS patch as package (won't work yet, without 
harddisk and a lot of changes to config files)
- updated X.509 Patch for FreeS/WAN to 0.9.8
- updated FreeS/WAN to v1.95
- added XFS (with ACL), xfsprogs v1.3.13, acl v1.1.3, attr v1.1.3
- added LVM 1.0.2 as package
- updated glibc to v2.2.5
- linked /etc/init.d to /etc/rc.d
- added samba v2.2.2 as package
- fixed a problem with statically linked openssl libraries
- added new sample /etc/dhcpd.conf
- added sleep 1 after loading of keymaps to avoid problems
- enabled SNMP in zebra
- enabled IPv6 in ucd-snmp
- enabled IPv6 in tcpdump
- enabled IPv6 in portslave
- added the "base" netfilter patches from iptables package, which are 
not yet in the kernel
     - quota match support
     - IP address pool support
	-  enable statistics on pool usage
     - Packet type match support
     - Multiple port with ranges match support
     - TIME match support
     - random match support
     - psd match support
     - Nth match support
     - IPV4OPTIONS match support
     - AH/ESP match support
     - realm match support
     - Connections/IP limit match support
     - NETLINK target support
     - IPV4OPTSSTRIP target support
     - SAME target support
     - NETMAP target support
     - Full TOS target support
     - ULOG target support
     - TTL target support
     - Packet Length match support (IPv6)
     - IPv6 Extension Headers Match
     - Aggregated address check (IPv6)
     - REJECT target support (IPv6)
- /etc/services was a html file, corrected
- updated Portslave to 20020119
- updated IPTables to v1.2.5
- enabled IPv6 and Netfilter for IPv6 in Kernel Configuration
- updated dhcpcd to v1.3.21-pl2
- updated shadow to v4.01
- updated sysvinit to v2.84
- added missing entries to /etc/modules.conf ( ieee1394mapfile and 
pnpbiosmapfile )
- disabled loop (block-major-7) in /etc/modules.conf
- added /etc/init.d/checkfs and mountfs from LFS 3.1
- split BIND into Server (ISC_BIND) and Util (ISC_BIND_UTILS) packages
- removed lwresd from BIND package and replaced it by a symlink to named
- added missing /etc/dnsroots.global (djbdns)
- removed man pages from bind package
- updated syslinux to v1.66
- updated hdparm to v4.6
- /etc/dhcpd.leases is now created, when it's missing
- Kernel:netlink devices now in Kernel (not longer as module)
- added net-tools v1.60 to base system
- added traceroute v1.4a12 to base system
- added sample /etc/fstab
- script for setting file permissions (early version)
- return correct return code in /etc/init.d/firewall
- correct problem with too less inodes on ramdisk

On 03/15/2002 12:55:45 PM Friedrich Lobenstock wrote:
>On Thu, 14 Mar 2002 19:26, Heiko Zuerker wrote:
>
>> I wanna know if we should switch to i586 code, because this would
>have a
>> lot of advantages.
>
>BTW what's the big advantage? Speed at most I guess, but what else?

Speed is one thing. I saw in a couple of packages comments of features,=

which need an i586 or higher.
I can't really recall what it was. :-((

cu
  Heiko=

On Thu, 14 Mar 2002 19:26, Heiko Zuerker wrote:

> I wanna know if we should switch to i586 code, because this would have a
> lot of advantages.

BTW what's the big advantage? Speed at most I guess, but what else?

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi,

we currently have an important vote on our website 
http://www.devil-linux.org .

I wanna know if we should switch to i586 code, because this would have a 
lot of advantages.

Please place your vote!

-- 

cu
   Heiko

We are Penguin, Resistance is futile!

http://www.devil-linux.org

http://www.newsforge.com/article.pl?sid=02/03/08/1840225&mode=thread

-- 

cu
   Heiko

We are Penguin, Resistance is futile!

http://www.devil-linux.org

I hate replying with my Notes Client, he will mess everything up.

>Basically all I have to do for my presentation next Tuesday
>(thelinuxsociety)
>is set up the devil on the network, get the "wows and ahhs" and then

Hope so ;-)

>I have a netgear card in here right now and am running latest redhat.
>I can
>probably get other old cards if need be.

You shouldn't have any problems, when this card is supported by the van=
illa
kernel.
All drivers are compiled in as a module and you just need to find out t=
he
name of the right module. ;-)

cu
  Heiko

=

Hi all,

Basically all I have to do for my presentation next Tuesday (thelinuxsociety)
is set up the devil on the network, get the "wows and ahhs" and then move on to
small linux and tiny X.

I have a netgear card in here right now and am running latest redhat.  I can
probably get other old cards if need be.

TIA, John



=====
John van Vlaanderen

      #############################################
      #    CXN, Inc. Contact:  jo...@th...   #               #
      #      Proud Sponsor of The Linux Society   #
      #        http://www.thelinuxsociety.org     #                 
      #############################################

__________________________________________________
Do You Yahoo!?
Try FREE Yahoo! Mail - the world's greatest free email!
http://mail.yahoo.com/

http://www.boingworld.com/workshops/linux/iptables-tutorial/

-- 

cu
   Heiko

We are Penguin, Resistance is futile!

http://www.devil-linux.org

Heiko Zuerker wrote:
> 
> The following message was sent by Friedrich Lobenstock <fl...@fl...> on Tue, 26 Feb 2002 15:41:48 +0100.
> 
> > Who's responsible for the documentation?
> >
> 
> right now, nobody.
> It's part of the  CVS tree and written with lyx.
> So it's no problem for all the developers to update it.
> When we release a new version of DL, I convert it into 
> html and throw it on the webserver.

HOWTO's are usually kept in docbook format but using that is
not as easy as it seems either. 

I personally don't have lyx installed.

-- 
MfG / Regards
Friedrich Lobenstock

The following message was sent by Friedrich Lobenstock <fl...@fl...> on Tue, 26 Feb 2002 15:41:48 +0100.

> Who's responsible for the documentation?
> 

right now, nobody.
It's part of the  CVS tree and written with lyx.
So it's no problem for all the developers to update it.
When we release a new version of DL, I convert it into html and throw it on the webserver.

cu
  Heiko

Who's responsible for the documentation?

Greetings
Friedl

Heiko Zuerker wrote:
> 
> The following message was sent by Patrik Lermon <ler...@ch...> on Tue, 26 Feb 2002 10:34:16 +0100.
> 
> > Hi Heiko.
> >
> > I'm sorry to bother you at your private adress, but this is because I didn't
> > get any reply as I was sending a documentation suggestion to
> > dev...@li....
> >
> > I did send this letter on the 18 and 21 of february, and I would really
> > appreciate some kind of feedback.
> >
> > Did this letter never reach the discuss? I remember having problem signing
> > up to the list, and I asked you for help and you put me on the list in
> > some
> > magic way.
> >
> > Anyway, what I was saying was:
> >
> > Sez Patrik Lermon:
> > > Hi.
> > >
> > > I have a suggestion for the documentation. I would like to add this point:
> > >
> > > ------------------------------------------------------------------------------
> > > 3.4.1 Configure the software packages
> > >
> > > Because the software used in Devil-Linux is a complilation of
> > > many software packages written by diferent people all over the world
> > > the documentation for the software is maintained and updated by
> > > the group who wrote the software. But here we have collected short
> > > installation- and configuration descriptions for some of them.
> > >
> > > 3.4.1.1 DDUP - Dynamic DNS Client (http://www.dyndns.org/)
> > >
> > > First of all you must register on http://www.dyndns.org/.
> > > Then you type: <TT>ddup --makeconf</TT>,
> > > this will start a guide which is going to ask you for
> > > your user name and password (on dyndns.org) and lastly
> > > which user who can use ddup, write <TT>root</TT>.
> > > Don't forget to run the <TT>save-config</TT> script!
> > > ------------------------------------------------------------------------------
> > >
> > > And then you could make an announcement and request people to write down
> > the
> > > exakt steps when they install or try something out, so that it can be
> > > published under the 3.4.1.x-series.
> > >
> > > Or maybe we/you/I could write down all software packages and write something
> > > like:
> > > "<I>No documentation available!
> > > Uncle Sam want YOU to write down the config-steps!</I>"
> > >
> > > What do you think?
> > >
> > > /Patrik Lermon, Sweden
> >
> >
> > /Patrik Lermon
> >
> >

The following message was sent by Patrik Lermon <ler...@ch...> on Tue, 26 Feb 2002 10:34:16 +0100.

> Hi Heiko.
> 
> I'm sorry to bother you at your private adress, but this is because I didn't
> get any reply as I was sending a documentation suggestion to
> dev...@li....
> 
> I did send this letter on the 18 and 21 of february, and I would really
> appreciate some kind of feedback.
> 
> Did this letter never reach the discuss? I remember having problem signing
> up to the list, and I asked you for help and you put me on the list in 
> some
> magic way.
> 
> Anyway, what I was saying was:
> 
> Sez Patrik Lermon:
> > Hi.
> > 
> > I have a suggestion for the documentation. I would like to add this point:
> > 
> > ------------------------------------------------------------------------------
> > 3.4.1 Configure the software packages
> > 
> > Because the software used in Devil-Linux is a complilation of
> > many software packages written by diferent people all over the world
> > the documentation for the software is maintained and updated by
> > the group who wrote the software. But here we have collected short
> > installation- and configuration descriptions for some of them.
> > 
> > 3.4.1.1 DDUP - Dynamic DNS Client (http://www.dyndns.org/)
> > 
> > First of all you must register on http://www.dyndns.org/.
> > Then you type: <TT>ddup --makeconf</TT>,
> > this will start a guide which is going to ask you for
> > your user name and password (on dyndns.org) and lastly
> > which user who can use ddup, write <TT>root</TT>.
> > Don't forget to run the <TT>save-config</TT> script!
> > ------------------------------------------------------------------------------
> > 
> > And then you could make an announcement and request people to write down 
> the
> > exakt steps when they install or try something out, so that it can be
> > published under the 3.4.1.x-series.
> > 
> > Or maybe we/you/I could write down all software packages and write something
> > like:
> > "<I>No documentation available!
> > Uncle Sam want YOU to write down the config-steps!</I>"
> > 
> > What do you think?
> > 
> > /Patrik Lermon, Sweden
> 
> 
> /Patrik Lermon
> 
> 

Sorry, should have gone to Devil-Linux-develop.
Posted it there.

FL

Hi guys and gals(any?)!

I would like to know how you think about this:

  Either everybody uses TAB to format the sources of our
  build system or it's a total chaotic code if different
  developers are working on one and the same file.

I would suggest to use a tab width of 4 chars.

-- 
MfG / Regards
Friedrich Lobenstock

Jasmine Davis wrote:
> 
> I did not do what you have said above, I will have to wait till late tonight
> before I can try it, I have two servers behind it and cannot restart till the
> traffic is light.
> 
> I will let you know how I go,

Good luck then.

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

>
> Try this, run "grep root /etc/passwd" before and after the password change.
> Did the result change?  Also run this before and after a reboot.
> Tell me what happens.

I did not do what you have said above, I will have to wait till late tonight 
before I can try it, I have two servers behind it and cannot restart till the 
traffic is light.

I will let you know how I go,

Thanks,
Jasmine

-- 
Jasmine Davis - Photo Girl
www.photo-girl.com
Registered Linux User 218292
-------------------------->>
Welcome to Suse Linux 7.1 i686 - Kernel 2.4.2-4 
hotgirls login:
 11:50am  up 1 day, 10:56,  1 user,  load average: 0.00, 0.00, 0.05

On Fri, 15 Feb 2002 01:27:54 +0100
"Friedrich Lobenstock" <fl...@fl...> wrote:

> Jasmine Davis wrote:
> >
> > Just a quick question, how can I disable the ctrl + alt  + del shutdown &
> > actually lock the console in version 0.5b2? 
> 
> Edit /etc/inittab as usual!

Just place a # in front of the line  
ca:12345:ctrlaltdel:.......


-- 

cu
  Heiko

http://www.devil-linux.org

Jasmine Davis wrote:
> 
> > > I also changed the root password but this did nothing.
> >
> > Did you run
> >   save-config
> > afterwards? I doubt not.
> 
> I doubt yes!! I save it everytime I make a change & also back it up as I have
> once lost a whole config through a floppy IO error.

Hmmmm....strange. 

Try this, run "grep root /etc/passwd" before and after the password change.
Did the result change?  Also run this before and after a reboot. 
Tell me what happens.

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

On Fri, 15 Feb 2002 11:27, you wrote:
> Jasmine Davis wrote:
> > Just a quick question, how can I disable the ctrl + alt  + del shutdown &
> > actually lock the console in version 0.5b2?
>
> Edit /etc/inittab as usual!

Thanks 

>
> > I also changed the root password but this did nothing.
>
> Did you run
>   save-config
> afterwards? I doubt not.

I doubt yes!! I save it everytime I make a change & also back it up as I have 
once lost a whole config through a floppy IO error.

:-)


-- 
Jasmine Davis - Photo Girl
www.photo-girl.com
Registered Linux User 218292
-------------------------->>
Welcome to Suse Linux 7.1 i686 - Kernel 2.4.2-4 
hotgirls login:
 11:32am  up 1 day, 10:38,  1 user,  load average: 0.18, 0.14, 0.20

Jasmine Davis wrote:
>
> Just a quick question, how can I disable the ctrl + alt  + del shutdown &
> actually lock the console in version 0.5b2? 

Edit /etc/inittab as usual!


> I also changed the root password but this did nothing.

Did you run 
  save-config 
afterwards? I doubt not.


-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi all,

Just a quick question, how can I disable the ctrl + alt  + del shutdown & 
actually lock the console in version 0.5b2? I am having problems with 0.5b5 
with kernel panic errors on bootup but 0.5b2 seems fine.

I also changed the root password but this did nothing.

Thanks in advance,

Jasmine
-- 
Jasmine Davis - Photo Girl
www.photo-girl.com
Registered Linux User 218292
-------------------------->>
Welcome to Suse Linux 7.1 i686 - Kernel 2.4.2-4 
hotgirls login:
 10:47am  up 1 day,  9:52,  1 user,  load average: 0.14, 0.23, 0.70