These are the steps i followed -
1) ./configure --disable-raw-socket-replacement
2) make
3) untar the sebek-lin26-3.2.0b.bin.tar.gz
4) cd to sebek-lin26-3.2.0b-bin
sebek-lin26-3.2.0b-bin has the following files -
a) compile_filter.pl 2) filter.txt 3) parameters.sh 4) readme 5)
sbk_install.sh 6) sbk.ko
5) set the following parameters in sbk-install.sh
a) DESTINATION_MAC
b) DESTINATION_IP
c) DESTINATION_PORT
d) SOURCE_PORT
e) INTERFACE
6) ./sbk_install.sh
I'm i doing something wrong?
Robert Mcmillen <[EMAIL PROTECTED]> wrote:
Can you give us a file listing of what is in the sebek-
lin26-3.2.0b.bin directory after you untar?
Did you customize the sbk-install.sh file prior to running it? You
need to specify a few parameters.
I have not looked into af.packet.c because I have not deployed
multiple honeypots with sebek at the same time, but it is something I
need to look for in the near future.
Rob
On Feb 13, 2008, at 11:31 AM, Nandhini Thiagarajan wrote:
> Yes i did install the kernel source rpm.
>
> I'm using Fedor core 2 with kernels 2.6.5-1.358 i686
>
> Installed kernel-2.6.5-1.358.src.rpm
>
> After installing the source kernel i'm seeing the same error -
> cannot find ..../net/packet/ af_packet.c
>
> Later i tried doing this -
>
> 1) ./configure --disable-raw-socket-replacement
> 2) make
> 3) Untar the sebek-lin26-3.2.0b.bin
> 4) Edited sbk_install.sh to configure the proper settings.
> 5) ./sbk-install.sh
>
> I'm seeing the below error-
>
> 0 1:8960::::::::::770:1825005
> 1 2:36864:::::::::
> 2 0:8960::::::::::770:1830555
> cp: cannot stst 'sbk.ko' : no such file
> insmod :cant read '307755150.o' :No such file or directory
> 307755150.o install failed
>
> I'm just stuck with Installing sebek for the past few days. I did
> follow the Build, read me docs.
> Thanks for your time.
_______________________________________________
Honeywall mailing list
[email protected]
https://public.honeynet.org/mailman/listinfo/honeywall
---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search._______________________________________________
Honeywall mailing list
[email protected]
https://public.honeynet.org/mailman/listinfo/honeywall
