Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-sparc
Navigation:
Lists: gentoo-sparc: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-sparc@g.o
From: gentuxx <gentuxx@...>
Subject: Re: Snort?
Date: Sun, 06 Aug 2006 15:28:13 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Owen wrote:
> On 8/3/06, gentuxx <gentuxx@...> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> I noticed this:
>>
>> * net-analyzer/snort
>>      Available versions:  -2.4.5 [M]2.6.0
>>      Installed:           none
>>      Homepage:            http://www.snort.org/
>>      Description:         Libpcap-based packet
>> sniffer/logger/lightweight IDS
>>
>>
>> I'm not sure what '-' and '[M]' means in eix, quite yet.  (I've just
>> started using eix.)  I also noticed in packages.gentoo.org that it
>> isn't even on the map for sparc.  So, am I stuck with downloading the
>> sources, and managing it outside of portage?  I'd really rather not do
>> that.  Is it really that unstable?  Or is there just no one to build
>> the ebuild for sparc?  If it's the latter, I might be able to help,
>> but I'd like some insight before I go diving into a project like that.
>>
>> Thanks.
>>
>> - --
>> gentux
>> echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'
>>
>
>
> Snort on Sparc works for the most part. It seems like if it tries to
> process more than about 150MB/s it'll sig11, and if it runs for more
> than a few days it sig11s. It's not really any better on
> Solaris/Sparc, so it's just a basic incompatibility with the Sparc
> architecture and Snort. If you do decide to stick with it, I recommend
> a simple cron job that restarts Snort every day, that seems to work
> pretty well for me. With as cheap as x86 hardware is though, I highly
> recommend you just pick up a cheap box and use that for Snort.
>
> HTH,
> Mike
Well, I have been toying with building a custom Smoothwall/IPCop type
firewall/router for my own use (not for distribution), based on gentoo
and php (instead of redhat and perl).  A couple years ago, I managed
to pick up a bunch of U1s from eBay for literally a dollar a piece,
and just recently, a friend passed a U5 to me.  So, I was looking to
use what I had available.

So, if I wanted to *test it* and/or live with restarting it once a
day, how do I unmask it so emerge will install it?
(/etc/portage/package.keywords didn't work)

- --
gentux
echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'

gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239  D840 4CF0 39E2
18D3 4A9E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFE1mz8TPA54hjTSp4RAkl4AKCtXfqVGN6ihgMhDsc8Zyd67Qr8QgCfZPje
4GvcWKIlZJY++wOb5Y2SgMo=
=wHBV
-----END PGP SIGNATURE-----

-- 
gentoo-sparc@g.o mailing list


Replies:
Re: Snort?
-- Jason Wever
References:
Snort?
-- gentuxx
Re: Snort?
-- Mike Owen
Navigation:
Lists: gentoo-sparc: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: Snort?
Next by thread:
Re: Snort?
Previous by date:
Re: Snort?
Next by date:
Re: Snort?


Updated Jun 17, 2009

Summary: Archive of the gentoo-sparc mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.