compiling Snort(Sam) Plugin

2005-09-19 Thread Florian
Hi When compiling snort after the patching the source I get following error: plugbase.o(.text+0x5ea): In function `InitOutputPlugins': /root/snort-2.4.1/src/plugbase.c:595: undefined reference to `AlertFWsamSetup' collect2: ld returned 1 exit status *** Error code 1 Stop in

Catching WINCH signal during sleep...

2005-09-19 Thread Andreas Kahari
Hi, I'm running the following simple test script: #!/bin/ksh -x trap 'eval $(resize)' WINCH while true; do sleep 10 done What I'm noticing is that the WINCH signal action is not actually carried out until at the end of the sleep, should the signal be sent during the sleep period. I'm

Re: Catching WINCH signal during sleep...

2005-09-19 Thread Damien Miller
Andreas Kahari wrote: (the WINCH signal is delivered when the terminal window changes size) SIGWINCH is ignored by default, otherwise your sleep(1) would exit if you changed the size of your xterm. See signal(3) for the full list. So it is doing the right thing wrt your quote of SUSv3: The

Re: Catching WINCH signal during sleep...

2005-09-19 Thread Andreas Kahari
On 19/09/05, Damien Miller [EMAIL PROTECTED] wrote: Andreas Kahari wrote: (the WINCH signal is delivered when the terminal window changes size) SIGWINCH is ignored by default, otherwise your sleep(1) would exit if you changed the size of your xterm. See signal(3) for the full list. Ok, so

Re: ftp-proxy(8) and pf question

2005-09-19 Thread Stephan A. Rickauer
Hi, Matt Rowley wrote: As far as I know, this only applies to _active_ ftp, about which I am not concerned at the moment. Ah yes... that's what I get for doing e-mail at 6am. :-/ no bother. Your problem description seems to imply that you have a block out all and that you're only

Re: Device not configured (APM, sound, modem)

2005-09-19 Thread Jan Johansson
Z L [EMAIL PROTECTED] wrote: For APM I tried to set the apmd_flags=YES in rc.conf. For sound and modem I tried the things that are described in the FAQ and manpages. Correct usage is apmd_flags= or with some valid flags between the apmd_flags=-q YES is for binary options like pf=YES

pOf

2005-09-19 Thread Steve Murdoch
Is there any way of limiting access to pptpd from pocket pc clients ? I cant find any fingerprints for pocket pc in pf.os ? Steve

snort / promiscuous mode

2005-09-19 Thread Sean Kiewiet
Hey all: OBSD3.7 SNORT2.3.3 I have a machine with 4 nics running 4 instances of snort: /usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c /etc/snort/em0.snort.conf -U -A none -m 122 -i em0 -D /usr/local/bin/snort -u sguil -g sguil -l /nsm/em1 -c /etc/snort/em1.snort.conf -U -A

PF ALTQ

2005-09-19 Thread Raphael Brunner
Hi @ all, I try to limit the Bandwidth on my OpenBSD 3.7 (Release). But there is something wrong. On my box run a ftp-server (10.0.0.1) without proxy. and I try to copy from/to it from 10.0.0.20 via FTP The traffic walk through the rules (log with tcpdump...), but there isn't a limit of

Re: Live dc

2005-09-19 Thread Andreas Bihlmaier
I want to thank all of you who replied on my previous mail about the live cd. I've seen many of those links you sent me which talk on how you can create a live cd. I would have done it my self but unfortunatelly I cant due to tech reasons right now. Also I dont know if it would have been good

Re: PF performance question

2005-09-19 Thread jared r r spiegel
On Mon, Sep 19, 2005 at 03:13:33PM -0300, Vinicius Pavanelli Vianna wrote: I tried to disable pf (pfctl -d) and it continues to loss packets ... The count on in and out are different because the pf is blocking some packets (?) those seem to contradict one another., just a typo?

Re: Wireless Strangeness

2005-09-19 Thread Alex Kirk
First, I apologize for the delay -- I had a very long, hectic day at work. Meanwhile, thank you for replying. wi0 at pci0 dev 12 function 0 National Datacomm Corp NCP130 Rev A2 rev 0x01: irq 9 wi0: PRISM2 HWB3163 rev.B, Firmware 0.3.0 (primary), 1.7.1 (station), address 00:80:c6:e3:72:2c

Changing kernels from i386 to amd64

2005-09-19 Thread John N. Brahy
How do I change my kernel from i386 to amd64? Do I have to do a reinstall or upgrade? I tried simply copying the bsd file from the amd64 directory off an ftp site but I got a unrecognized binary format error from the boot loader.

Re: PF ALTQ

2005-09-19 Thread jared r r spiegel
On Tue, Sep 20, 2005 at 01:16:19AM +0100, Stuart Henderson wrote: You can only queue outgoing traffic with altq, not incoming. You can sometimes achieve the same effect by queuing outgoing traffic on a different interface (e.g. to queue internet-LAN bandwidth, queue on the LAN

Re: logging blocked connections in pf, but no line noise

2005-09-19 Thread jared r r spiegel
On Mon, Sep 19, 2005 at 08:59:48PM +0200, -f wrote: hmm, on Mon, Sep 19, 2005 at 10:01:58AM -0600, j knight said that i was thinking of making another rule, just below this one: block in block in log from any to $ext_if Another alternative: block in quick to

Re: Wireless Strangeness

2005-09-19 Thread pedro la peu
It was the most current I could find for this particular chipset The chipset is ancient. shorty.kirknet.net:~$ dmesg OpenBSD 3.4-stable (GENERIC) #0: Sun Sep 18 18:29:41 EDT 2005 I'm bailing here. I don't remember 3.4 well enough.

Re: PF performance question

2005-09-19 Thread Vinicius Pavanelli Vianna
jared r r spiegel wrote: On Mon, Sep 19, 2005 at 03:13:33PM -0300, Vinicius Pavanelli Vianna wrote: I tried to disable pf (pfctl -d) and it continues to loss packets ... The count on in and out are different because the pf is blocking some packets (?) those seem to

Re: Wireless Strangeness

2005-09-19 Thread Alex Kirk
shorty.kirknet.net:~$ dmesg OpenBSD 3.4-stable (GENERIC) #0: Sun Sep 18 18:29:41 EDT 2005 I'm bailing here. I don't remember 3.4 well enough. I was afraid of that. I've been meaning to upgrade to 3.7 for a while -- is it likely to make that big of a difference if I upgrade? If I were to

Re: PF performance question

2005-09-19 Thread j knight
--- Quoting Vinicius Pavanelli Vianna on 2005/09/19 at 22:24 -0300: They say all their ifaces are forced to 100 full duplex, when i try to autoneg with their switches i always got 100 half duplex, and the speed is bad, so i forced all to 100 full duplex so i can get some speed, don't ask me

Re: Problems compiling kernel on 3.7 / amd64

2005-09-19 Thread Ted Unangst
On Mon, 19 Sep 2005, John N. Brahy wrote: cd /usr cvs -t -z9 update -rOPENBSD_3_ -P src 1. there is no OPENBSD_3_ tag. 2. don't retype commands unless you can do it flawlessly. 3. you forgot the -d option to update. -- And that's why he won't get my vote.

Re: PF performance question

2005-09-19 Thread Spruell, Darren-Perot
From: Vinicius Pavanelli Vianna [mailto:[EMAIL PROTECTED] They say all their ifaces are forced to 100 full duplex, when i try to autoneg with their switches i always got 100 half duplex, and the speed is bad, so i forced all to 100 full duplex so i can get some speed, don't ask me why they

Re: Changing kernels from i386 to amd64

2005-09-19 Thread Ted Unangst
On Mon, 19 Sep 2005, John N. Brahy wrote: How do I change my kernel from i386 to amd64? Do I have to do a reinstall or upgrade? I tried simply copying the bsd file from the amd64 directory off an ftp site but I got a unrecognized binary format error from the boot loader. reinstall. despite

Re: Wireless Strangeness

2005-09-19 Thread Spruell, Darren-Perot
From: Alex Kirk [mailto:[EMAIL PROTECTED] I'm bailing here. I don't remember 3.4 well enough. I was afraid of that. I've been meaning to upgrade to 3.7 for a while -- is it likely to make that big of a difference if I upgrade? If I were to still experience this problem with 3.7, might