Its due to sebek - when its enabled it screws something up. Run a honeypot with no sebek and its good. haven't figured out why yet
On 10/11/07, Parvinder Bhasin <[EMAIL PROTECTED]> wrote: > Earl wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Try this: > > > > chown -R apache /var/log/pcap/* > > > > I believe the captured data is there but apache cannot access it. > > > > Earl > > > > On Thu, 11 Oct 2007 18:54:11 +0000 GaRaGeD Style > > <[EMAIL PROTECTED]> wrote: > >>> Thanks for the reply. Have you tried the older version of roo > >> 1.1? Does > >>> it have the same problem? > >>> I will give it a shot today. > >>> > >>> Cheers! > >>> -Parvinder Bhasin > >>> > >> Haven't used the old one, it lacks a few things, i wouldn't be > >> very > >> insterested on using it, I will wait to the new version of roo > >> (hopefully it will come to live soon, or later). > >> > >> Max > >> > >> -- > >> <?php > >> $signautre = null; > >> echo $signature; > >> _______________________________________________ > >> Honeywall mailing list > >> [email protected] > >> https://public.honeynet.org/mailman/listinfo/honeywall > > -----BEGIN PGP SIGNATURE----- > > Note: This signature can be verified at https://www.hushtools.com/verify > > Charset: UTF8 > > Version: Hush 2.5 > > > > wkYEARECAAYFAkcOgHIACgkQk7+e+4lPSm2gigCeLIqLA1LJJyUNCQPPN67/b5lMf8wA > > oJxsO8a2Mmyh5zMwWuHi03jFk8om > > =DOXd > > -----END PGP SIGNATURE----- > > > > > > > Thanks Earl!! I will give it a shot and post my findings. > > Thank you guys!! > > -Parvinder Bhasin > > _______________________________________________ > Honeywall mailing list > [email protected] > https://public.honeynet.org/mailman/listinfo/honeywall > -- Brian Toovey [EMAIL PROTECTED] http://vulntrac.com _______________________________________________ Honeywall mailing list [email protected] https://public.honeynet.org/mailman/listinfo/honeywall
