TR: [Labrea-users] Can't start Labrea on an interface with no IP Address assigned (using -n and -m!)

[Gordon, L. <Lor...@te...>]

-----Message d'origine-----
De : lorgor
Envoy=E9 : 21 avril, 2004 17:25
=C0 : 'Eric'
Objet : RE: [Labrea-users] Can't start Labrea on an interface with no =
IP
Address assigned (using -n and -m!)


Looking at the code in lbio_init, around line 300, it seems likely that =
the
interface is not being recognized as being IP for whatever reason.

How is the interface defined? If you can give me some more info, then i =
can
try to reproduce the problem.

Could try without snort but i doubt this will change much.

Maybe a workaround would be to give some dummy ip address to this =
interface.

thanks,

lorgor


-----Message d'origine-----
De : Eric
Envoy=E9 : 21 avril, 2004 13:03
=C0 : lab...@li...
Objet : [Labrea-users] Can't start Labrea on an interface with no IP
Address assigned (using -n and -m!)


We have an interface with no IP address in promisc mode. Snort is also
listening on this interface, could that cause problems?


awweb:/usr/local/sbin # uname -a
Linux awweb 2.4.21-99-default #1 Wed Sep 24 13:30:51 UTC 2003 i686 i686
i386 GNU/Linux

OS: SuSE Linux 9

awweb:/usr/local/sbin # /usr/local/sbin/labrea -i eth1 -n 216.113.234.0
-m 255.255.255.0 -z

Wed Apr 21 09:02:18 2004  User specified capture subnet / mask:
216.113.234.0/24
Wed Apr 21 09:02:18 2004  LaBrea will attempt to capture unused IPs.
Wed Apr 21 09:02:18 2004  Full internal BPF filter: arp or (ip and =
ether
dst host 00:00:0F:FF:FF:FF)
Wed Apr 21 09:02:18 2004  LaBrea will log to syslog
Wed Apr 21 09:02:18 2004  Logging will be verbose.
Wed Apr 21 09:02:18 2004  Initiated on interface: eth1
labrea: *** Unable to determine IP address from the interface.
Wed Apr 21 09:02:18 2004  Labrea exiting...
Wed Apr 21 09:02:18 2004  0/0 packets (received/dropped) by filter




BRDS,

Eric