Gentoo Archives: gentoo-sparc

From: gentuxx <gentuxx@×××××.com>
To: gentoo-sparc@l.g.o
Subject: Re: [gentoo-sparc] Snort?
Date: Sun, 06 Aug 2006 22:29:13
Message-Id: 44D66CFD.5090508@gmail.com
In Reply to: Re: [gentoo-sparc] Snort? by Mike Owen
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Mike Owen wrote:
5 > On 8/3/06, gentuxx <gentuxx@×××××.com> wrote:
6 >> -----BEGIN PGP SIGNED MESSAGE-----
7 >> Hash: SHA1
8 >>
9 >> I noticed this:
10 >>
11 >> * net-analyzer/snort
12 >> Available versions: -2.4.5 [M]2.6.0
13 >> Installed: none
14 >> Homepage: http://www.snort.org/
15 >> Description: Libpcap-based packet
16 >> sniffer/logger/lightweight IDS
17 >>
18 >>
19 >> I'm not sure what '-' and '[M]' means in eix, quite yet. (I've just
20 >> started using eix.) I also noticed in packages.gentoo.org that it
21 >> isn't even on the map for sparc. So, am I stuck with downloading the
22 >> sources, and managing it outside of portage? I'd really rather not do
23 >> that. Is it really that unstable? Or is there just no one to build
24 >> the ebuild for sparc? If it's the latter, I might be able to help,
25 >> but I'd like some insight before I go diving into a project like that.
26 >>
27 >> Thanks.
28 >>
29 >> - --
30 >> gentux
31 >> echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'
32 >>
33 >
34 >
35 > Snort on Sparc works for the most part. It seems like if it tries to
36 > process more than about 150MB/s it'll sig11, and if it runs for more
37 > than a few days it sig11s. It's not really any better on
38 > Solaris/Sparc, so it's just a basic incompatibility with the Sparc
39 > architecture and Snort. If you do decide to stick with it, I recommend
40 > a simple cron job that restarts Snort every day, that seems to work
41 > pretty well for me. With as cheap as x86 hardware is though, I highly
42 > recommend you just pick up a cheap box and use that for Snort.
43 >
44 > HTH,
45 > Mike
46 Well, I have been toying with building a custom Smoothwall/IPCop type
47 firewall/router for my own use (not for distribution), based on gentoo
48 and php (instead of redhat and perl). A couple years ago, I managed
49 to pick up a bunch of U1s from eBay for literally a dollar a piece,
50 and just recently, a friend passed a U5 to me. So, I was looking to
51 use what I had available.
52
53 So, if I wanted to *test it* and/or live with restarting it once a
54 day, how do I unmask it so emerge will install it?
55 (/etc/portage/package.keywords didn't work)
56
57 - --
58 gentux
59 echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'
60
61 gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239 D840 4CF0 39E2
62 18D3 4A9E
63 -----BEGIN PGP SIGNATURE-----
64 Version: GnuPG v1.4.5 (GNU/Linux)
65
66 iD8DBQFE1mz8TPA54hjTSp4RAkl4AKCtXfqVGN6ihgMhDsc8Zyd67Qr8QgCfZPje
67 4GvcWKIlZJY++wOb5Y2SgMo=
68 =wHBV
69 -----END PGP SIGNATURE-----
70
71 --
72 gentoo-sparc@g.o mailing list

Replies

Subject Author
Re: [gentoo-sparc] Snort? Jason Wever <weeve@g.o>