Bug#390408: ITP: hlbr -- An IPS that runs over layer 2 (no TCP/IP stack required)

2006-09-30 Thread André Bertelli Araújo

Package: wnpp
Severity: wishlist
Owner: Andre Bertelli Araujo [EMAIL PROTECTED]


* Package name: hlbr
 Version : 1.1
 Upstream Author : Andre Bertelli Araujo [EMAIL PROTECTED], Joao
Eriberto Mota Filho [EMAIL PROTECTED]
* URL : http://hlbr.sourceforge.net/
* License : GPL
 Programming Lang: C
 Description : An IPS that runs over layer 2 (no TCP/IP stack required)

HLBR stands for Hogwash Light BR. It is a brazilian fork of
Jason Larsen's Hogwash IPS. Its main feature is that it can run
directly over OSI model layer 2, which means it doesn't even requires a
TCP/IP stack, running as a bridge. HLBR comes with a set of rules to
detect known malicious network traffic, and you can define your own rules
as well. Packet handling include options like dropping or diverting it to
another machine (such as a honeypot). Since it works like a bridge and
doesn't requires an IP address, it is invisible to intruders.

-- System Information:
Debian Release: testing/unstable
 APT prefers testing
 APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-k7
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#335442: slmodemd process hang

2005-11-15 Thread André Bertelli Araújo
2005/10/30, Eduard Bloch [EMAIL PROTECTED]:
 #include hallo.h
 * André Bertelli Araújo [Sat, Oct 29 2005, 07:46:45PM]:
  2005/10/28, Eduard Bloch [EMAIL PROTECTED]:
   #include hallo.h
   * André Bertelli Araújo [Thu, Oct 27 2005, 11:49:35PM]:
2005/10/24, Eduard Bloch [EMAIL PROTECTED]:
 #include hallo.h
 * André Bertelli Araújo [Mon, Oct 24 2005, 09:48:56PM]:
  - Restarted with /etc/init.d/slmodemd restart
  - then the following message appeared:
 
  Loading SmartLink Modem driver into kernel ... failed.
  FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
  such file or directory
  FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
  such file or directory

 Args. Do depmod -a or reboot.
   
Well, since I rebooted the machine since the last time I read this, I
just did depmod -a. No problems.
   
Then I did: /etc/init.d/sl-modem-daemon restart. This was pritned on
the console:
Shutting down SmartLink Modem driver normally ... no slmodemd daemon 
running.
Loading ALSA modem driver into kernel ... done.
Starting SmartLink Modem driver for: .
Creating /dev/modem symlink, pointing to: /dev/ttySL0.
   
So it appears it loaded the ALSA driver instead of the slmodemd, as
expected. Problem now is... there is no device /dev/ttySL*. So pon
refuses dialing.
  
   Interesting. Sounds like no ALSA driver has been found for your modem
   interface. Please send me your /proc/asound/cards contents and output of
   lspci (just for interest).
 
  /proc/asound/cards :
 
  0 [CK8S   ]: NFORCE - NVidia CK8S
   NVidia CK8S with ALC850 at 0xfebfb000, irq 201

 Weird. Your modem should have been there when one of the ALSA modules
 has loaded successfully, but apparently something broke. Can you load
 snd-intel8x0m snd-via82xx-modem manually?

Yes - in fact, snd-intel8x0m were already loaded.


  lspci :
 
  :02:07.0 Modem: Smart Link Ltd.: Unknown device 8800 (rev 02)

 For the alternative (SmartLink driver), could you try the latest upstream
 version 2.9.10 from http://www.smlink.com/ ? I guess you will need to
 unload ALSA modules before trying that.

Ok - downloaded that, unloaded all alsa drivers (everything starting
with snd) before doing anything.

Compiled with:
make KERNEL_DIR=/usr/src/kernel-headers-2.6.11-1-686/

make -C modem all
make[1]: Entering directory `/root/slmodem-2.9.10/modem'
gcc -Wall -g -O -I. -DCONFIG_DEBUG_MODEM   -o modem.o -c modem.c
make[1]: Leaving directory `/root/slmodem-2.9.10/modem'
modem.c: In function 'modem_reset':
modem.c:1701: error: invalid storage class for function 'sregs_init'
modem.c:1713: warning: implicit declaration of function 'sregs_init'
modem.c: At top level:
modem.c:1727: error: static declaration of 'sregs_init' follows
non-static declaration
modem.c:1713: error: previous implicit declaration of 'sregs_init' was here
make[1]: *** [modem.o] Error 1
make: *** [modem] Error 2

So I had to correct that by hand; basically I cutted the line 1701
(declares the function sregs_init inside of function modem_reset) and
pasted it two lines above (outside of modem_reset). Then it compiled.

Followed the instructions on the README, did a 'make install'... then
a 'modprobe slamr' and got this:

slamr: version magic '2.6.11-1-686 686 gcc-4.0' should be
'2.6.11-1-686 686 gcc-3.3'
FATAL: Error inserting slamr
(/lib/modules/2.6.11-1-686/extra/slamr.ko): Invalid module format


This is the output of uname -a , in case you're wondering:
Linux rhinox 2.6.12-1-686 #1 Tue Sep 27 12:52:50 JST 2005 i686 GNU/Linux

--
.o. -=- Arkanoid -=-
..o http://bertelli.endofinternet.net 
ooo Debian GNU/Linux



Bug#335442: slmodemd process hang

2005-10-29 Thread André Bertelli Araújo
2005/10/28, Eduard Bloch [EMAIL PROTECTED]:
 #include hallo.h
 * André Bertelli Araújo [Thu, Oct 27 2005, 11:49:35PM]:
  2005/10/24, Eduard Bloch [EMAIL PROTECTED]:
   #include hallo.h
   * André Bertelli Araújo [Mon, Oct 24 2005, 09:48:56PM]:
- Restarted with /etc/init.d/slmodemd restart
- then the following message appeared:
   
Loading SmartLink Modem driver into kernel ... failed.
FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
such file or directory
FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
such file or directory
  
   Args. Do depmod -a or reboot.
 
  Well, since I rebooted the machine since the last time I read this, I
  just did depmod -a. No problems.
 
  Then I did: /etc/init.d/sl-modem-daemon restart. This was pritned on
  the console:
  Shutting down SmartLink Modem driver normally ... no slmodemd daemon 
  running.
  Loading ALSA modem driver into kernel ... done.
  Starting SmartLink Modem driver for: .
  Creating /dev/modem symlink, pointing to: /dev/ttySL0.
 
  So it appears it loaded the ALSA driver instead of the slmodemd, as
  expected. Problem now is... there is no device /dev/ttySL*. So pon
  refuses dialing.

 Interesting. Sounds like no ALSA driver has been found for your modem
 interface. Please send me your /proc/asound/cards contents and output of
 lspci (just for interest).

/proc/asound/cards :

0 [CK8S   ]: NFORCE - NVidia CK8S
 NVidia CK8S with ALC850 at 0xfebfb000, irq 201

lspci :

:00:00.0 Host bridge: nVidia Corporation: Unknown device 00e1 (rev a1)
:00:01.0 ISA bridge: nVidia Corporation: Unknown device 00e0 (rev a2)
:00:01.1 SMBus: nVidia Corporation: Unknown device 00e4 (rev a1)
:00:02.0 USB Controller: nVidia Corporation: Unknown device 00e7 (rev a1)
:00:02.1 USB Controller: nVidia Corporation: Unknown device 00e7 (rev a1)
:00:02.2 USB Controller: nVidia Corporation: Unknown device 00e8 (rev a2)
:00:05.0 Bridge: nVidia Corporation: Unknown device 00df (rev a2)
:00:06.0 Multimedia audio controller: nVidia Corporation: Unknown
device 00ea (rev a1)
:00:08.0 IDE interface: nVidia Corporation: Unknown device 00e5 (rev a2)
:00:0a.0 IDE interface: nVidia Corporation: Unknown device 00e3 (rev a2)
:00:0b.0 PCI bridge: nVidia Corporation: Unknown device 00e2 (rev a2)
:00:0e.0 PCI bridge: nVidia Corporation: Unknown device 00ed (rev a2)
:00:18.0 Host bridge: Advanced Micro Devices [AMD] K8 NorthBridge
:00:18.1 Host bridge: Advanced Micro Devices [AMD] K8 NorthBridge
:00:18.2 Host bridge: Advanced Micro Devices [AMD] K8 NorthBridge
:00:18.3 Host bridge: Advanced Micro Devices [AMD] K8 NorthBridge
:01:00.0 VGA compatible controller: nVidia Corporation NV34
[GeForce FX 5200] (rev a1)
:02:07.0 Modem: Smart Link Ltd.: Unknown device 8800 (rev 02)


--
.o. -=- Arkanoid -=-
..o http://bertelli.endofinternet.net 
ooo Debian GNU/Linux



Bug#335442: slmodemd process hang

2005-10-27 Thread André Bertelli Araújo
2005/10/24, Eduard Bloch [EMAIL PROTECTED]:
 #include hallo.h
 * André Bertelli Araújo [Mon, Oct 24 2005, 09:48:56PM]:
  - Restarted with /etc/init.d/slmodemd restart
  - then the following message appeared:
 
  Loading SmartLink Modem driver into kernel ... failed.
  FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
  such file or directory
  FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
  such file or directory

 Args. Do depmod -a or reboot.

Well, since I rebooted the machine since the last time I read this, I
just did depmod -a. No problems.

Then I did: /etc/init.d/sl-modem-daemon restart. This was pritned on
the console:
Shutting down SmartLink Modem driver normally ... no slmodemd daemon running.
Loading ALSA modem driver into kernel ... done.
Starting SmartLink Modem driver for: .
Creating /dev/modem symlink, pointing to: /dev/ttySL0.

So it appears it loaded the ALSA driver instead of the slmodemd, as
expected. Problem now is... there is no device /dev/ttySL*. So pon
refuses dialing.

--
.o. -=- Arkanoid -=-
..o http://bertelli.endofinternet.net 
ooo Debian GNU/Linux



Bug#335442: slmodemd process hang

2005-10-24 Thread André Bertelli Araújo
2005/10/24, Eduard Bloch [EMAIL PROTECTED]:
 #include hallo.h
 * André Bertelli Araújo [Sun, Oct 23 2005, 10:42:59PM]:
  Package: sl-modem-daemon
Version: 2.9.9a
 
  When calling the program 'pon' to stablish a dial-up connection, the
  modem does a 'click' (as if preparing to dial), but doesn't dial
  anything. The following message appear in /var/log/messages: (it's
  printed at the console as well)

 It is not a slmodemd bug, it is either in the slamr driver or in
 elsewhere in the kernel. Try following:

  - use a standard kernel provided by Debian
  - use the alsa driver instead of the one from smartlink. It should be
   autoselected if you uninstall the sl-modem-driver-... package, do
   rmmod slamr and restart the init script.

Kernel is standard (package kernel-image-2.6.11-1-686)
I just did the following:
- removed the package sl-modem-modules-2.6.11-1-686
- rmmod slamr (confirmed before lsmod that the module was there,
then after it wasn't anymore).
- Restarted with /etc/init.d/slmodemd restart
- then the following message appeared:

Loading SmartLink Modem driver into kernel ... failed.
FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
such file or directory
FATAL: Could not open '/lib/modules/2.6.11-1-686/misc/slamr.ko': No
such file or directory


--
.o. -=- Arkanoid -=-
..o http://bertelli.endofinternet.net 
ooo Debian GNU/Linux



Bug#335442: slmodemd process hang

2005-10-23 Thread André Bertelli Araújo
Package: sl-modem-daemon
  Version: 2.9.9a

When calling the program 'pon' to stablish a dial-up connection, the
modem does a 'click' (as if preparing to dial), but doesn't dial
anything. The following message appear in /var/log/messages: (it's
printed at the console as well)

Oct 23 19:58:11 rhinox pppd[3652]: pppd 2.4.3 started by root, uid 0
Oct 23 19:58:12 rhinox chat[3653]: abort on (BUSY)
Oct 23 19:58:12 rhinox chat[3653]: abort on (NO CARRIER)
Oct 23 19:58:12 rhinox chat[3653]: abort on (VOICE)
Oct 23 19:58:12 rhinox chat[3653]: abort on (NO DIALTONE)
Oct 23 19:58:12 rhinox chat[3653]: abort on (NO DIAL TONE)
Oct 23 19:58:12 rhinox chat[3653]: abort on (NO ANSWER)
Oct 23 19:58:12 rhinox chat[3653]: abort on (DELAYED)
Oct 23 19:58:12 rhinox chat[3653]: send (ATZ^M)
Oct 23 19:58:12 rhinox chat[3653]: expect (OK)
Oct 23 19:58:12 rhinox chat[3653]: ATZ^M^M
Oct 23 19:58:12 rhinox chat[3653]: OK
Oct 23 19:58:12 rhinox chat[3653]:  -- got it
Oct 23 19:58:12 rhinox chat[3653]: send (ATDT30318300^M)
Oct 23 19:58:12 rhinox chat[3653]: expect (CONNECT)
Oct 23 19:58:12 rhinox chat[3653]: warning: read() on stdin returned 0
Oct 23 19:58:12 rhinox chat[3653]: Failed
Oct 23 19:58:12 rhinox kernel: e0d275c0
Oct 23 19:58:12 rhinox kernel: Modules linked in: ppp_generic slhc
slamr ipv6 af_packet snd_intel8x0m amd74xx snd_intel8x0 snd_ac97_codec
snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd soundcore
snd_page_alloc nls_cp437 capability commoncap reiserfs ntfs ext2 ext3
jbd mbcache dm_mod i2c_nforce2 i2c_core cpufreq_userspace
cpufreq_ondemand cpufreq_powersave video button battery container ac
shpchp pci_hotplug forcedeth ehci_hcd ohci_hcd usbcore amd64_agp
agpgart analog gameport floppy pcspkr rtc evdev tsdev psmouse mousedev
parport_pc lp parport ide_disk ide_cd ide_core cdrom sd_mod thermal
processor fan sata_nv libata scsi_mod unix fbcon font bitblit vesafb
cfbcopyarea cfbimgblt cfbfillrect
Oct 23 19:58:12 rhinox kernel: CPU:0
Oct 23 19:58:12 rhinox kernel: EIP:0060:[pg0+546829760/1069900800]
   Tainted: P  VLI
Oct 23 19:58:12 rhinox kernel: EFLAGS: 00010282   (2.6.11-1-686)
Oct 23 19:58:12 rhinox kernel: EIP is at sysdep_memset+0x10/0x20 [slamr]
Oct 23 19:58:12 rhinox kernel: eax:    ebx: db51f400   ecx:
3000   edx: 827e9a20
Oct 23 19:58:12 rhinox kernel: esi: daf61de0   edi: 827e9a20   ebp:
db437000   esp: daf61d88
Oct 23 19:58:12 rhinox kernel: ds: 007b   es: 007b   ss: 0068
Oct 23 19:58:12 rhinox kernel: Process slmodemd (pid: 3610,
threadinfo=daf6 task=dedba060)
Oct 23 19:58:12 rhinox kernel: Stack: daf61db0 e0d566ac 827e9a20
 3000  d560d000 
Oct 23 19:58:12 rhinox kernel:1000 0001 
0001 0001 9600 0010 
Oct 23 19:58:12 rhinox kernel:  
  02600800  0001
Oct 23 19:58:12 rhinox kernel: Call Trace:
Oct 23 19:58:12 rhinox kernel:  [pg0+547022508/1069900800]
FinishModioSetup__13ModemInstanceP18tagMODIOINFOSTRUCT+0x568/0x628
[slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+547020002/1069900800]
Enable__13ModemInstanceP18tagMODIOINFOSTRUCT+0x22/0x19c [slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+546866218/1069900800]
Start__10VModemLineP18tagMODIOINFOSTRUCT+0xf6/0x128 [slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+547024859/1069900800]
CalculateStartParameters__13ModemInstance+0x1f3/0x1fc [slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+547019809/1069900800]
ReallyOpenModio__13ModemInstance+0x141/0x1e0 [slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+547027091/1069900800]
Start__13ModemInstanceP10STARTPARAM+0x3b/0x54 [slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+546831253/1069900800]
amrmo_card_start+0x39/0x44 [slamr]
Oct 23 19:58:12 rhinox kernel:  [pg0+546829358/1069900800]
amrmo_ioctl+0xfe/0x110 [slamr]
Oct 23 19:58:12 rhinox kernel:  [do_ioctl+88/128] do_ioctl+0x58/0x80
Oct 23 19:58:12 rhinox kernel:  [vfs_ioctl+101/480] vfs_ioctl+0x65/0x1e0
Oct 23 19:58:12 rhinox kernel:  [copy_to_user+66/96] copy_to_user+0x42/0x60
Oct 23 19:58:12 rhinox kernel:  [sys_ioctl+103/144] sys_ioctl+0x67/0x90
Oct 23 19:58:12 rhinox kernel:  [syscall_call+7/11] syscall_call+0x7/0xb
Oct 23 19:58:12 rhinox kernel: Code: e8 56 0f 3f df eb e0 8d 74 26 00
e9 2b 44 41 df 8d 74 26 00 8d bc 27 00 00 00 00 57 8b 54 24 08 8b 4c
24 10 0f b6 44 24 0c 89 d7 f3 aa 5f 89 d0 c3 8d 76 00 8d bc 27 00 00
00 00 83 ec 08 8b 44
Oct 23 19:58:13 rhinox pppd[3652]: Exit.



Packages:
- kernel 2.6.11-1-686
- sl-modem-daemon 2.9.9a
- sl-modem-source 2.9.9a

Machine:
- processor Athlon64
- modem LM56N

Modem as seen by lspci -v :

:02:07.0 Modem: Smart Link Ltd.: Unknown device 8800 (rev 02)
(prog-if 00 [Generic])

Subsystem: Unknown device 1801:2800 Flags: medium devsel, IRQ 177
Memory at eb00 (32-bit, prefetchable) [size=16M] Capabilities:
[80] Power Management version 2


What I did:
---
Used module-assistant to compile and install sl-modem-source,
following the instructions in