Re: Something is strange with the latest build

[imxuk]

Having a similar problem, snort wont start because its trying to find to a non-existant interface…. details below:

cat /var/etc/mpd_wan.conf

startup:
pppoeclient:
        new -i pppoe0 pppoeclient pppoeclient
        set iface route default
        set iface disable on-demand
        set iface idle 0
        set iface enable tcpmssfix
        set iface up-script /usr/local/sbin/ppp-linkup
        set iface down-script /usr/local/sbin/ppp-linkdown
        set bundle disable multilink
        set auth authname "1800HG.user@btbroadband.com"
        set auth password "0"
        set link keep-alive 10 60
        set link max-redial 0
        set link no acfcomp protocomp
        set link disable pap chap
        set link accept chap
                set link mtu 1492
        set ipcp yes vjcomp
        set ipcp ranges 0.0.0.0/0 0.0.0.0/0
        set ipcp enable req-pri-dns
        set ipcp enable req-sec-dns
        open

cat /var/etc/mpd_wan.links

pppoeclient:
        set link type pppoe
        set pppoe iface le0
        set pppoe service ""
        set pppoe enable originate
        set pppoe disable incoming

ifconfig -a

le0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
        options=8 <vlan_mtu>ether 00:0c:29:57:1e:64
        inet6 fe80::20c:29ff:fe57:1e64%le0 prefixlen 64 scopeid 0x1
        media: Ethernet autoselect
        status: active
le1: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
        options=8 <vlan_mtu>ether 00:0c:29:57:1e:6e
        inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255
        inet6 fe80::20c:29ff:fe57:1e6e%le1 prefixlen 64 scopeid 0x2
        media: Ethernet autoselect
        status: active
plip0: flags=108810 <pointopoint,simplex,multicast,needsgiant>metric 0 mtu 1500
pfsync0: flags=41 <up,running>metric 0 mtu 1460
        pfsync: syncdev: lo0 syncpeer: 224.0.0.240 maxupd: 128
lo0: flags=8049 <up,loopback,running,multicast>metric 0 mtu 16384
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
enc0: flags=0<> metric 0 mtu 1536
pflog0: flags=100 <promisc>metric 0 mtu 33204
pppoe0: flags=88d1 <up,pointopoint,running,noarp,simplex,multicast>metric 0 mtu 1492
        inet6 fe80::20c:29ff:fe57:1e64%pppoe0 prefixlen 64 scopeid 0x8
        inet 86.xxx.xxx.xx --> 217.xx.xx.xxx netmask 0xffffffff

Snort error:

Initializing Network Interface ng0
ERROR: OpenPcap() device ng0 open:
        BIOCSETIF: ng0: Device not configured
Fatal Error, Quitting..

Im currently running snort 1.3/2.0 alpha, however i had this problem on 1.2 RC2...</up,pointopoint,running,noarp,simplex,multicast></promisc></up,loopback,running,multicast></up,running></pointopoint,simplex,multicast,needsgiant></vlan_mtu></up,broadcast,running,simplex,multicast></vlan_mtu></up,broadcast,running,simplex,multicast>