Gentoo Archives: gentoo-sparc

From: gentuxx <gentuxx@×××××.com>
To: gentoo-sparc@l.g.o
Subject: Re: [gentoo-sparc] Snort?
Date: Sun, 06 Aug 2006 22:29:13
Message-Id: 44D66CFD.5090508@gmail.com
In Reply to: Re: [gentoo-sparc] Snort? by Mike Owen
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Owen wrote:
> On 8/3/06, gentuxx <gentuxx@×××××.com> wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I noticed this: >> >> * net-analyzer/snort >> Available versions: -2.4.5 [M]2.6.0 >> Installed: none >> Homepage: http://www.snort.org/ >> Description: Libpcap-based packet >> sniffer/logger/lightweight IDS >> >> >> I'm not sure what '-' and '[M]' means in eix, quite yet. (I've just >> started using eix.) I also noticed in packages.gentoo.org that it >> isn't even on the map for sparc. So, am I stuck with downloading the >> sources, and managing it outside of portage? I'd really rather not do >> that. Is it really that unstable? Or is there just no one to build >> the ebuild for sparc? If it's the latter, I might be able to help, >> but I'd like some insight before I go diving into a project like that. >> >> Thanks. >> >> - -- >> gentux >> echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge' >> > > > Snort on Sparc works for the most part. It seems like if it tries to > process more than about 150MB/s it'll sig11, and if it runs for more > than a few days it sig11s. It's not really any better on > Solaris/Sparc, so it's just a basic incompatibility with the Sparc > architecture and Snort. If you do decide to stick with it, I recommend > a simple cron job that restarts Snort every day, that seems to work > pretty well for me. With as cheap as x86 hardware is though, I highly > recommend you just pick up a cheap box and use that for Snort. > > HTH, > Mike
Well, I have been toying with building a custom Smoothwall/IPCop type firewall/router for my own use (not for distribution), based on gentoo and php (instead of redhat and perl). A couple years ago, I managed to pick up a bunch of U1s from eBay for literally a dollar a piece, and just recently, a friend passed a U5 to me. So, I was looking to use what I had available. So, if I wanted to *test it* and/or live with restarting it once a day, how do I unmask it so emerge will install it? (/etc/portage/package.keywords didn't work) - -- gentux echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge' gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239 D840 4CF0 39E2 18D3 4A9E -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFE1mz8TPA54hjTSp4RAkl4AKCtXfqVGN6ihgMhDsc8Zyd67Qr8QgCfZPje 4GvcWKIlZJY++wOb5Y2SgMo= =wHBV -----END PGP SIGNATURE----- -- gentoo-sparc@g.o mailing list

Replies

Subject Author
Re: [gentoo-sparc] Snort? Jason Wever <weeve@g.o>