[prev in list] [next in list] [prev in thread] [next in thread] 

List:       honeywall
Subject:    [Honeywall] Hflow Execution Instructions
From:       r00t () ellicit ! org (r00t)
Date:       2009-07-28 5:02:16
Message-ID: c9964e620907280202h522add4fsc2a5ec0af5baad3d () mail ! gmail ! com
[Download RAW message or body]

Jeff,

I am very interested in how this goes, and I am offering my assistance
to resolve this issue as I am having the same problem.  It seems hflow
is not recognizing sebek packets at all.  Wireshark works great, but
hflow would be much nicer.

2009/7/27 MutziMan <mutziMan@gmx.net>:
> take a look at the snort logfile. If the source code is still pristine the
> file should be located at /var/log/hflow/snort_out.txt according to
> snort_block.hpp:279
>
>
> snort_block.hpp:279
> snprintf(&full_log_name[0],SNORT_MAX_OUTPUT_LINE_LENGTH-1,"%s/snort_out.txt",log_dir);
>
> miou
>
>
> 2009/7/27 JEFFREY S STEWART <jss1124@esu.edu>
>>
>> All,
>>
>> I'm currently trying to build hflow outside of honeywall so that I can
>> work on it.? However, I'm having a little difficulty setting it up.? I have
>> it built and everything it needs (snort, mysql, etc) installed as well, but
>> I keep getting an error when I try to start it.
>>
>> Snort block: failed to detect correct initialization of snort, aborting:
>> File exists
>>
>> I've tried restarting it several times, but it does not work.? If anyone
>> has instructions on how to fix this error or just get hflow to install and
>> run, I would be very appreciative.
>>
>> Thanks,
>> Jeff
>>
>> _______________________________________________
>> Honeywall mailing list
>> Honeywall@public.honeynet.org
>> https://public.honeynet.org/mailman/listinfo/honeywall
>>
>
>
>
> --
>
> A change of heart, a change of plan must surely be the way. Get off the
> ground - you're heaven-bound! And if you like it when you're there you'll be
> allowed to stay.
>
> "This is the way it has to be", the wisemen wisely said. So we believed, but
> some did not. And though we never knew, the wisemen, wisely had them shot.
>
> _______________________________________________
> Honeywall mailing list
> Honeywall@public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/honeywall
>
>



-- 
NodeReality - random ramblings on code, security, and similar
http://www.nodereality.com

[prev in list] [next in list] [prev in thread] [next in thread]