Re: [tcpdump-workers] SCO libpcap

It's print nothing. sufei7099 2008-06-12 发件人： Guy Harris 发送时间： 2008-06-12 11:22:06 收件人： tcpdump-workers@lists.tcpdump.org 抄送： 主题： Re: [tcpdump-workers] SCO libpcap On Jun 11, 2008, at 7:49 PM, sufei7099 wrote: > the result is: > -rw-r--r-- 1 bin bin21089 Jun 4 11:40 /opt

Re: [tcpdump-workers] SCO libpcap

On Jun 11, 2008, at 7:49 PM, sufei7099 wrote: the result is: -rw-r--r-- 1 bin bin21089 Jun 4 11:40 /opt/K/SCO/ lli/5.0.7a/llicompat/dlpi.h What does egrep DL_PROMISC_PHYS /opt/K/SCO/lli/5.0.7a/llicompat/dlpi.h print? Is there some methods to resolve it ? or it mea

Re: [tcpdump-workers] about this mailing list

On Jun 11, 2008, at 7:32 PM, Michael Bernstein wrote: I think mainly all IPS/IDS are based on TCPdump filters and translation into IDS rules. I don't think that's the case, at least if it's "all IPS/IDS" rather than "most IPS/IDS". A quick look at the "community" rules for Snort CURRENT

Re: [tcpdump-workers] SCO libpcap

the result is: -rw-r--r-- 1 bin bin21089 Jun 4 11:40 /opt/K/SCO/lli/5.0.7a/llicompat/dlpi.h Is there some methods to resolve it ? or it means libpcap can not used on SCO OpenServer? sufei7099 2008-06-12 发件人： Guy Harris 发送时间： 2008-06-12 10:46:21 收件人： tcpdump-workers@lists

Re: [tcpdump-workers] SCO libpcap

On Jun 11, 2008, at 7:14 PM, sufei7099 wrote: The output of "ls -l /usr/include/sys/dlpi.h" is: lrwxrwxrwx 1 root root 38 Jun 4 11:46 /usr/include/ sys/dlpi.h -> /opt/K/SCO/lli/5.0.7a/llicompat/dlpi.h What does ls -l /opt/K/SCO/lli/5.0.7a/llicompat/dlpi.h print?

[tcpdump-workers] about this mailing list

Hi everyone - I've been a member of the mailing list, but haven't had a chance to read all the articles. My main question is based on Libpcap and TCPdump, essential tools in network security analysis. My background in that I'm a CCIE Security, experience with MSSP performing security analysis o

Re: [tcpdump-workers] SCO libpcap

The output of ./configure is : # ./configure checking for a BSD-compatible install... config/install-sh -c checking whether build environment is sane... yes checking whether make sets $(MAKE)... yes checking for working aclocal-1.4... missing checking for working autoconf... missing checking for w

Re: [tcpdump-workers] SCO libpcap

On Jun 11, 2008, at 6:44 PM, sufei7099 wrote: the following is the faults when I run make after run ./configure: What was the output of ./configure? "pcap-dlpi.c", line 699: error: undefined symbol: DL_PROMISC_PHYS Googling for DL_PROMISC_PHYS on any sco.com site found no hits. This coul

Re: [tcpdump-workers] SCO libpcap

the following is the faults when I run make after run ./configure: # make /bin/ksh ./libtool --mode=compile cc -DHAVE_CONFIG_H -D_U_="" -I. -I/usr/local/include-g -belf -c bpf_filter.c cc -DHAVE_CONFIG_H -D_U_= -I. -I/usr/local/include -g -belf -c bpf_filter.c -o bpf_filter.o

Re: [tcpdump-workers] Help： Is that libpcap supp ort for SCO Openserver???

On Jun 10, 2008, at 12:18 AM, linzw wrote: I want to compile the Snort in SCO Openserver, and the first I should compile libpcap, But I don't kown wether libpcap support for SCO Openserver. To quote the libpcap INSTALL.txt file: If you use SCO, you might have trouble building libpcap

[tcpdump-workers] Help： Is that libpcap support for SCO Openserver???

Hi, all I want to compile the Snort in SCO Openserver, and the first I should compile libpcap, But I don't kown wether libpcap support for SCO Openserver. Is there anyone can help me? 3x. -- linzw 2008-06-03 - This is the tcpdump-workers l