[Labrea-users] Can't start Labrea on an interface with no IP Address assigned (using -n and -m!)

[Eric H. <eri...@ap...>]

We have an interface with no IP address in promisc mode. Snort is also
listening on this interface, could that cause problems?


awweb:/usr/local/sbin # uname -a
Linux awweb 2.4.21-99-default #1 Wed Sep 24 13:30:51 UTC 2003 i686 i686
i386 GNU/Linux

OS: SuSE Linux 9

awweb:/usr/local/sbin # /usr/local/sbin/labrea -i eth1 -n 216.113.234.0
-m 255.255.255.0 -z

Wed Apr 21 09:02:18 2004  User specified capture subnet / mask:
216.113.234.0/24
Wed Apr 21 09:02:18 2004  LaBrea will attempt to capture unused IPs.
Wed Apr 21 09:02:18 2004  Full internal BPF filter: arp or (ip and ether
dst host 00:00:0F:FF:FF:FF)
Wed Apr 21 09:02:18 2004  LaBrea will log to syslog
Wed Apr 21 09:02:18 2004  Logging will be verbose.
Wed Apr 21 09:02:18 2004  Initiated on interface: eth1
labrea: *** Unable to determine IP address from the interface.
Wed Apr 21 09:02:18 2004  Labrea exiting...
Wed Apr 21 09:02:18 2004  0/0 packets (received/dropped) by filter




BRDS,

Eric Hines, GCIA
CEO, President, Chairman
Applied Watch Technologies, Inc.
http://www.appliedwatch.com
Direct: (877) 262-7593 x327
Fax: (877) 262-7593