Re: Something is strange with the latest build



  • Having a similar problem, snort wont start because its trying to find to a non-existant interface…. details below:

    cat /var/etc/mpd_wan.conf

    startup:
    pppoeclient:
            new -i pppoe0 pppoeclient pppoeclient
            set iface route default
            set iface disable on-demand
            set iface idle 0
            set iface enable tcpmssfix
            set iface up-script /usr/local/sbin/ppp-linkup
            set iface down-script /usr/local/sbin/ppp-linkdown
            set bundle disable multilink
            set auth authname "1800HG.user@btbroadband.com"
            set auth password "0"
            set link keep-alive 10 60
            set link max-redial 0
            set link no acfcomp protocomp
            set link disable pap chap
            set link accept chap
                    set link mtu 1492
            set ipcp yes vjcomp
            set ipcp ranges 0.0.0.0/0 0.0.0.0/0
            set ipcp enable req-pri-dns
            set ipcp enable req-sec-dns
            open

    cat /var/etc/mpd_wan.links

    pppoeclient:
            set link type pppoe
            set pppoe iface le0
            set pppoe service ""
            set pppoe enable originate
            set pppoe disable incoming

    ifconfig -a

    le0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
            options=8 <vlan_mtu>ether 00:0c:29:57:1e:64
            inet6 fe80::20c:29ff:fe57:1e64%le0 prefixlen 64 scopeid 0x1
            media: Ethernet autoselect
            status: active
    le1: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
            options=8 <vlan_mtu>ether 00:0c:29:57:1e:6e
            inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255
            inet6 fe80::20c:29ff:fe57:1e6e%le1 prefixlen 64 scopeid 0x2
            media: Ethernet autoselect
            status: active
    plip0: flags=108810 <pointopoint,simplex,multicast,needsgiant>metric 0 mtu 1500
    pfsync0: flags=41 <up,running>metric 0 mtu 1460
            pfsync: syncdev: lo0 syncpeer: 224.0.0.240 maxupd: 128
    lo0: flags=8049 <up,loopback,running,multicast>metric 0 mtu 16384
            inet 127.0.0.1 netmask 0xff000000
            inet6 ::1 prefixlen 128
            inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
    enc0: flags=0<> metric 0 mtu 1536
    pflog0: flags=100 <promisc>metric 0 mtu 33204
    pppoe0: flags=88d1 <up,pointopoint,running,noarp,simplex,multicast>metric 0 mtu 1492
            inet6 fe80::20c:29ff:fe57:1e64%pppoe0 prefixlen 64 scopeid 0x8
            inet 86.xxx.xxx.xx --> 217.xx.xx.xxx netmask 0xffffffff

    Snort error:

    Initializing Network Interface ng0
    ERROR: OpenPcap() device ng0 open:
            BIOCSETIF: ng0: Device not configured
    Fatal Error, Quitting..

    Im currently running snort 1.3/2.0 alpha, however i had this problem on 1.2 RC2...</up,pointopoint,running,noarp,simplex,multicast></promisc></up,loopback,running,multicast></up,running></pointopoint,simplex,multicast,needsgiant></vlan_mtu></up,broadcast,running,simplex,multicast></vlan_mtu></up,broadcast,running,simplex,multicast>


Log in to reply