Snort

All, I have been having problems with snort, this may be kind of OT for this list (should be debian-user) but I have a feeling more people on this list use snort. I manage 2 potato converted to woody machines. Each morning I receive 2 blank reports from cron.daily. I have snort-mysql installed.

Re: [OT} Need advice on rsync backups

suppose you have a file list like generated by find $BASEDIR -print pipe through # include all files with necessary paths sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"' :l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' | sort -u > tmp.rsync # sort and remove duplicates # exclude evrything not explicitly i

multi eth0:x:y with ifconfig...

I'm using the 'ifconfig' command to manage dynamically my intefaces. I up and down eth0... but Debian add some eth0:0:2 !!! If I down all my interfaces and reload /etc/network/intefaces (which is correct), eth0:x:y are added again !!! How to radically "remove" these bad interfaces and restart on

Re: Snort

Phillip Hofmeister wrote on Feb 17, 2003 at 10:19:24 AM: > All, > > I have been having problems with snort, this may be kind of OT for this > list (should be debian-user) but I have a feeling more people on this > list use snort. > > I manage 2 potato converted to woody machines. Each morning I

Re: [OT} Need advice on rsync backups

On Mon, Feb 17, 2003 at 05:02:54PM +0100, Lars Ellenberg wrote: > suppose you have a file list like generated by find $BASEDIR -print > > pipe through > # include all files with necessary paths > sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"' > :l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' | > sort -u >

Re: Snort

On 2003/02/17 10:19:24AM -0500, Mon, Phillip Hofmeister wrote: > > I have snort-mysql installed. snort appears to be running fine but > nothing ever gets written to the mysql database. The username/password > I gave snort have update/select/insert rights to the mysql DB. > > Any clue of where I

Re: Snort

One other thing I can think of (even though I primarily use redhat) is if you are logging to a different computer other than localhost, make sure that: - you don't have a firewall blocking the inbound connection - you have /etc/hosts.allow configured properly - i'm not sure about debian+mysql, but

Re: multi eth0:x:y with ifconfig...

On Monday, 17 February 2003, at 17:37:58 +0100, Benoit Lathiere wrote: > I'm using the 'ifconfig' command to manage dynamically my intefaces. > I up and down eth0... but Debian add some eth0:0:2 !!! > If I down all my interfaces and reload /etc/network/intefaces (which is > correct), eth0:x:y ar

Snort

All, I have been having problems with snort, this may be kind of OT for this list (should be debian-user) but I have a feeling more people on this list use snort. I manage 2 potato converted to woody machines. Each morning I receive 2 blank reports from cron.daily. I have snort-mysql installed.

Re: [OT} Need advice on rsync backups

suppose you have a file list like generated by find $BASEDIR -print pipe through # include all files with necessary paths sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"' :l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' | sort -u > tmp.rsync # sort and remove duplicates # exclude evrything not explicitly i

multi eth0:x:y with ifconfig...

I'm using the 'ifconfig' command to manage dynamically my intefaces. I up and down eth0... but Debian add some eth0:0:2 !!! If I down all my interfaces and reload /etc/network/intefaces (which is correct), eth0:x:y are added again !!! How to radically "remove" these bad interfaces and restart on

Re: Snort

Phillip Hofmeister wrote on Feb 17, 2003 at 10:19:24 AM: > All, > > I have been having problems with snort, this may be kind of OT for this > list (should be debian-user) but I have a feeling more people on this > list use snort. > > I manage 2 potato converted to woody machines. Each morning I

Re: [OT} Need advice on rsync backups

On Mon, Feb 17, 2003 at 05:02:54PM +0100, Lars Ellenberg wrote: > suppose you have a file list like generated by find $BASEDIR -print > > pipe through > # include all files with necessary paths > sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"' > :l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' | > sort -u >

Re: Snort

On 2003/02/17 10:19:24AM -0500, Mon, Phillip Hofmeister wrote: > > I have snort-mysql installed. snort appears to be running fine but > nothing ever gets written to the mysql database. The username/password > I gave snort have update/select/insert rights to the mysql DB. > > Any clue of where I

Re: Snort

One other thing I can think of (even though I primarily use redhat) is if you are logging to a different computer other than localhost, make sure that: - you don't have a firewall blocking the inbound connection - you have /etc/hosts.allow configured properly - i'm not sure about debian+mysql, but

Re: multi eth0:x:y with ifconfig...

On Monday, 17 February 2003, at 17:37:58 +0100, Benoit Lathiere wrote: > I'm using the 'ifconfig' command to manage dynamically my intefaces. > I up and down eth0... but Debian add some eth0:0:2 !!! > If I down all my interfaces and reload /etc/network/intefaces (which is > correct), eth0:x:y ar