OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andreas Dembach (dembacakopernikus.de)
Date: Tue Jun 26 2001 - 11:35:01 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    snort version 1.7 SEGFAULTS if told to listen on a GRE tunnel interface:

    -----------------------
    # snort -h xx.xx.xx.xx/24 -c /etc/snort/snort.conf
    -S"HOME_NET=xx.xx.xx.xx/24" -l /var/log/snort -b -d -u snort -g snort
    -s -i gre0
    Initializing Network Interface gre0
    Warning: arptype 778 not supported by libpcap - falling back to cooked
    socket

    snort cannot handle data link type 113
    Exiting...
    Segmentation fault
    #
    -------------------------------

    Is this a snort problem or one of libpcap? tcpdump complains (but works
    anyway):

    >Warning: arptype 778 not supported by libpcap - falling back to cooked
    socket
    >tcpdump: listening on gre0

    Im am running on linux with a 2.2.17 kernel and libpcap0 0.6.2-1

    Any ideas or comments?

    Andreas Dembach

    _______________________________________________
    Snort-announce mailing list
    Snort-announcelists.sourceforge.net
    http://lists.sourceforge.net/lists/listinfo/snort-announce