All,
I have been having problems with snort, this may be kind of OT for this
list (should be debian-user) but I have a feeling more people on this
list use snort.
I manage 2 potato converted to woody machines. Each morning I receive 2
blank reports from cron.daily.
I have snort-mysql installed.
suppose you have a file list like generated by find $BASEDIR -print
pipe through
# include all files with necessary paths
sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"'
:l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' |
sort -u > tmp.rsync # sort and remove duplicates
# exclude evrything not explicitly i
I'm using the 'ifconfig' command to manage dynamically my intefaces.
I up and down eth0... but Debian add some eth0:0:2 !!!
If I down all my interfaces and reload /etc/network/intefaces (which is
correct), eth0:x:y are added again !!!
How to radically "remove" these bad interfaces and restart on
Phillip Hofmeister wrote on Feb 17, 2003 at 10:19:24 AM:
> All,
>
> I have been having problems with snort, this may be kind of OT for this
> list (should be debian-user) but I have a feeling more people on this
> list use snort.
>
> I manage 2 potato converted to woody machines. Each morning I
On Mon, Feb 17, 2003 at 05:02:54PM +0100, Lars Ellenberg wrote:
> suppose you have a file list like generated by find $BASEDIR -print
>
> pipe through
> # include all files with necessary paths
> sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"'
> :l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' |
> sort -u >
On 2003/02/17 10:19:24AM -0500, Mon, Phillip Hofmeister wrote:
>
> I have snort-mysql installed. snort appears to be running fine but
> nothing ever gets written to the mysql database. The username/password
> I gave snort have update/select/insert rights to the mysql DB.
>
> Any clue of where I
One other thing I can think of (even though I primarily use redhat) is
if you are logging to a different computer other than localhost, make
sure that:
- you don't have a firewall blocking the inbound connection
- you have /etc/hosts.allow configured properly
- i'm not sure about debian+mysql, but
On Monday, 17 February 2003, at 17:37:58 +0100,
Benoit Lathiere wrote:
> I'm using the 'ifconfig' command to manage dynamically my intefaces.
> I up and down eth0... but Debian add some eth0:0:2 !!!
> If I down all my interfaces and reload /etc/network/intefaces (which is
> correct), eth0:x:y ar
All,
I have been having problems with snort, this may be kind of OT for this
list (should be debian-user) but I have a feeling more people on this
list use snort.
I manage 2 potato converted to woody machines. Each morning I receive 2
blank reports from cron.daily.
I have snort-mysql installed.
suppose you have a file list like generated by find $BASEDIR -print
pipe through
# include all files with necessary paths
sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"'
:l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' |
sort -u > tmp.rsync # sort and remove duplicates
# exclude evrything not explicitly i
I'm using the 'ifconfig' command to manage dynamically my intefaces.
I up and down eth0... but Debian add some eth0:0:2 !!!
If I down all my interfaces and reload /etc/network/intefaces (which is
correct), eth0:x:y are added again !!!
How to radically "remove" these bad interfaces and restart on
Phillip Hofmeister wrote on Feb 17, 2003 at 10:19:24 AM:
> All,
>
> I have been having problems with snort, this may be kind of OT for this
> list (should be debian-user) but I have a feeling more people on this
> list use snort.
>
> I manage 2 potato converted to woody machines. Each morning I
On Mon, Feb 17, 2003 at 05:02:54PM +0100, Lars Ellenberg wrote:
> suppose you have a file list like generated by find $BASEDIR -print
>
> pipe through
> # include all files with necessary paths
> sed -ne "s,^${BASEDIR//\\*/\\*}/,+ /,;"'
> :l1;/+ ../{p;s,/$,,;s,[^/]*$,,;b l1;};' |
> sort -u >
On 2003/02/17 10:19:24AM -0500, Mon, Phillip Hofmeister wrote:
>
> I have snort-mysql installed. snort appears to be running fine but
> nothing ever gets written to the mysql database. The username/password
> I gave snort have update/select/insert rights to the mysql DB.
>
> Any clue of where I
One other thing I can think of (even though I primarily use redhat) is
if you are logging to a different computer other than localhost, make
sure that:
- you don't have a firewall blocking the inbound connection
- you have /etc/hosts.allow configured properly
- i'm not sure about debian+mysql, but
On Monday, 17 February 2003, at 17:37:58 +0100,
Benoit Lathiere wrote:
> I'm using the 'ifconfig' command to manage dynamically my intefaces.
> I up and down eth0... but Debian add some eth0:0:2 !!!
> If I down all my interfaces and reload /etc/network/intefaces (which is
> correct), eth0:x:y ar
16 matches
Mail list logo