Re: SSH install in Woody

2001-09-12 Thread Peter Cordes
On Mon, Sep 10, 2001 at 11:41:32AM -0700, Jeff Coppock wrote: > I ran ssh-keygen with strace and found that the seg fault occurs > after /dev/urandom is opened, then closed, and the "brk0x..." > lines come out. FYI, malloc(3) uses brk(2) to allocate small amounts of memory. -- #define X(x,y) x

Re: Is snort-stat and 5snort really broken in sid?

2001-09-12 Thread Andrew Pollock
On 12.09.2001 at 11:30:02, Andrew Pollock <[EMAIL PROTECTED]> wrote: > Even if I run snort-stat manually on auth.log (after I've made snort start with > -s) it doesn't return anything when there are alerts in the log. > > Any suggestions appreciated, I'd like to get daily summary emails. Well I

exim + procmail = segmenatation fault

2001-09-12 Thread Tom Breza
hi there I am running procmail and exim from woody, few days ago I been inform by someone that he try to send me mail with attachment and he got mail back with an error, same happen on one of my mail servers, the following message appers in my syslog like 2001-09-08 12:05:15 15ffvA-00019I-00 <=

Re: Is snort-stat and 5snort really broken in sid?

2001-09-12 Thread Andrew Pollock
On 12.09.2001 at 11:30:02, Andrew Pollock <[EMAIL PROTECTED]> wrote: > Even if I run snort-stat manually on auth.log (after I've made snort start with > -s) it doesn't return anything when there are alerts in the log. > > Any suggestions appreciated, I'd like to get daily summary emails. Well I

exim + procmail = segmenatation fault

2001-09-12 Thread Tom Breza
hi there I am running procmail and exim from woody, few days ago I been inform by someone that he try to send me mail with attachment and he got mail back with an error, same happen on one of my mail servers, the following message appers in my syslog like 2001-09-08 12:05:15 15ffvA-00019I-00 <=

enscript -e option a security risk?

2001-09-12 Thread Ben Pfaff
In looking through the print filter generated by magicfilter, I noticed that it gives the -e option to GNU enscript. The -e option turns on special "escapes", including the following as documented in the enscript manpage: epsfinline EPS file to the document. Escape's syntax

Re: Listening Ports

2001-09-12 Thread Javier Fernández-Sanguino Peña
On Mon, Sep 10, 2001 at 10:22:49AM +0200, Alexander Reelsen wrote: > On Sun, Sep 09, 2001 at 06:31:57PM -0400, hpknight wrote: > inetd also has this feature (not very well documented). > use [EMAIL PROTECTED] in inetd.conf in order to use that feature. > xinetd is nicer, anyway :-) I went

enscript -e option a security risk?

2001-09-12 Thread Ben Pfaff
In looking through the print filter generated by magicfilter, I noticed that it gives the -e option to GNU enscript. The -e option turns on special "escapes", including the following as documented in the enscript manpage: epsfinline EPS file to the document. Escape's syntax

Re: Listening Ports

2001-09-12 Thread Javier Fernández-Sanguino Peña
On Mon, Sep 10, 2001 at 10:22:49AM +0200, Alexander Reelsen wrote: > On Sun, Sep 09, 2001 at 06:31:57PM -0400, hpknight wrote: > inetd also has this feature (not very well documented). > use service@ip in inetd.conf in order to use that feature. > xinetd is nicer, anyway :-) I went on an

Re: Is snort-stat and 5snort really broken in sid?

2001-09-12 Thread James Nord
[EMAIL PROTECTED] wrote: What version are you using?? make sure the following line is in your snort.conf -- I think the debian equiv is snort-lib: output alert_syslog: LOG_AUTH --sjk On 12 Sep, Andrew Pollock wrote: Even if I run snort-stat manually on auth.log (after I've made snort start

Re: Is snort-stat and 5snort really broken in sid?

2001-09-12 Thread James Nord
[EMAIL PROTECTED] wrote: >What version are you using?? >make sure the following line is in your snort.conf -- I think the debian >equiv is snort-lib: > >output alert_syslog: LOG_AUTH > >--sjk > >On 12 Sep, Andrew Pollock wrote: > >>Even if I run snort-stat manually on auth.log (after I've made sn