[Honeywall] Re: Honeywall Digest, Vol 14, Issue 15

Gayan Sahabandu gayan.leo at gmail.com
Wed Jul 16 18:44:46 EDT 2008


Hi David,
I got a good idea about it now after your explanation. But I still gets that
error message. When I try to compile the script which is on
sebek-lin26-3.2.0b-bin (sbk_install.sh). I gets the following error message
:

Installing Sebek:
0 1:8960:::::::::14:3491
1 2:36864::::::::::
2 0:8960:::::::::14:3532
insmod: error inserting '14703549.o': -1 Invalid module format
14703549.o install failed

Any idea of how to fix this problem ?
Thanks,
Gayan




On 7/16/08, honeywall-request at public.honeynet.org <
honeywall-request at public.honeynet.org> wrote:
>
> Send Honeywall mailing list submissions to
>        honeywall at public.honeynet.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://public.honeynet.org/mailman/listinfo/honeywall
> or, via email, send a message with subject or body 'help' to
>        honeywall-request at public.honeynet.org
>
> You can reach the person managing the list at
>        honeywall-owner at public.honeynet.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Honeywall digest..."
>
>
> Today's Topics:
>
>   1. Re: Honeywall Digest, Vol 14, Issue 14 (Gayan Sahabandu)
>   2. Re: Re: Honeywall Digest, Vol 14, Issue 14 (David Watson)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Wed, 16 Jul 2008 15:52:02 +0100
> From: "Gayan Sahabandu" <gayan.leo at gmail.com>
> Subject: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 14
> To: honeywall at public.honeynet.org
> Message-ID:
>        <f64211650807160752i102ccfc7w4065d12dd62efcc9 at mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Rob,
> I followed the instructions you gave me even though I couldn't figure out
> what is "steps in the HOWTO.  It has you building sebek; " I have couple of
> questions to ask from you.
>
> *1. why there are two files naming as, sebek-lin26-3.2.0b and
> sebek-lin26-3.2.0b-bin ?
> *is those two files should be under one folder prior to executing of
> ./sbk_install.sh script ?
> because after I copied the content of sebek bin file to sebek 3.2 I did not
> get the previous error message. but now I have the following error message.
> *
> 2. Sebek linux installation error.
>
> Installing Sebek:
> 0 1:8960:::::::::14:3491
> 1 2:36864::::::::::
> 2 0:8960:::::::::14:3532
> insmod: error inserting '14703549.o': -1 Invalid module format
> 14703549.o install failed
>
> *I am sorry about asking all these questions because I am new to both linux
> as well as honeywall. Can anybody or Rob please provide any assistant to
> solve this error.
> Thank you,
> Gayan*
> *
>
> On Tue, Jul 15, 2008 at 5:00 PM, <honeywall-request at public.honeynet.org>
> wrote:
>
> > Send Honeywall mailing list submissions to
> >        honeywall at public.honeynet.org
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >        https://public.honeynet.org/mailman/listinfo/honeywall
> > or, via email, send a message with subject or body 'help' to
> >        honeywall-request at public.honeynet.org
> >
> > You can reach the person managing the list at
> >        honeywall-owner at public.honeynet.org
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Honeywall digest..."
> >
> >
> > Today's Topics:
> >
> >   1. Re: Re: Honeywall Digest, Vol 14, Issue 12 (Rob McMillen)
> >
> >
> > ----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Tue, 15 Jul 2008 08:13:48 -0400
> > From: "Rob McMillen" <rvmcmil at gmail.com>
> > Subject: Re: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 12
> > To: "Mailing list for users and developers of the Honeywall"
> >        <honeywall at public.honeynet.org>
> > Message-ID:
> >        <bf6b07a70807150513v4dc93f75s821532bc965cd74b at mail.gmail.com>
> > Content-Type: text/plain; charset=ISO-8859-1
> >
> > OK... try following the steps in the HOWTO.  It has you building
> > sebek; then moving the resulting tar.gz file to another directory and
> > extracting it.  Inside this new directory you should find an
> > sbk_install.sh and that should be the one you edit and launch.
> >
> > mv sebek-lin26-3.2.0b-bin.tar.gz /tmp
> > cd /tmp
> > tar zxf sebek-lin26-3.2.0b-bin.tar.gz
> > cd sebek-lin26-3.2.0b-bin
> >
> > Rob
> >
> > On Mon, Jul 14, 2008 at 2:03 PM, Gayan Sahabandu <gayan.leo at gmail.com>
> > wrote:
> > >  this a result of editing (entering Honeypot MAC IP etc....) and
> running
> > the
> > > sbk_install.sh in the sebek source code directory.
> > > Gayan
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Honeywall mailing list
> > Honeywall at public.honeynet.org
> > https://public.honeynet.org/mailman/listinfo/honeywall
> >
> >
> > End of Honeywall Digest, Vol 14, Issue 14
> > *****************************************
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> http://public.honeynet.org/pipermail/honeywall/attachments/20080716/b59b3ff9/attachment-0001.html
>
> ------------------------------
>
> Message: 2
> Date: Wed, 16 Jul 2008 16:01:49 +0100
> From: David Watson <david at honeynet.org.uk>
> Subject: Re: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 14
> To: Mailing list for users and developers of the Honeywall
>        <honeywall at public.honeynet.org>
> Message-ID: <487E0D5D.6000702 at honeynet.org.uk>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Gayan,
>
> The multiple files may be the source of your confusion. The first is the
> source code tarball for Sebek (which you use to build the Sebek module
> for a particular architecture). The second tarball (with bin in the
> name) is the compiled binary distribution of Sebek (the thing you made
> from the source). This only contains the code that gets installed on the
> honeypot, rather than the entire source code.
>
> Make sense?
>
> Thanks,
>
> David
>
> Gayan Sahabandu wrote:
> > Hi Rob,
> > I followed the instructions you gave me even though I couldn't figure out
> > what is "steps in the HOWTO.  It has you building sebek; " I have couple
> of
> > questions to ask from you.
> >
> > *1. why there are two files naming as, sebek-lin26-3.2.0b and
> > sebek-lin26-3.2.0b-bin ?
> > *is those two files should be under one folder prior to executing of
> > ./sbk_install.sh script ?
> > because after I copied the content of sebek bin file to sebek 3.2 I did
> not
> > get the previous error message. but now I have the following error
> message.
> > *
> > 2. Sebek linux installation error.
> >
> > Installing Sebek:
> > 0 1:8960:::::::::14:3491
> > 1 2:36864::::::::::
> > 2 0:8960:::::::::14:3532
> > insmod: error inserting '14703549.o': -1 Invalid module format
> >   14703549.o install failed
> >
> > *I am sorry about asking all these questions because I am new to both
> linux
> > as well as honeywall. Can anybody or Rob please provide any assistant to
> > solve this error.
> > Thank you,
> > Gayan*
> > *
> >
> > On Tue, Jul 15, 2008 at 5:00 PM, <honeywall-request at public.honeynet.org>
> > wrote:
> >
> >> Send Honeywall mailing list submissions to
> >>        honeywall at public.honeynet.org
> >>
> >> To subscribe or unsubscribe via the World Wide Web, visit
> >>        https://public.honeynet.org/mailman/listinfo/honeywall
> >> or, via email, send a message with subject or body 'help' to
> >>        honeywall-request at public.honeynet.org
> >>
> >> You can reach the person managing the list at
> >>        honeywall-owner at public.honeynet.org
> >>
> >> When replying, please edit your Subject line so it is more specific
> >> than "Re: Contents of Honeywall digest..."
> >>
> >>
> >> Today's Topics:
> >>
> >>   1. Re: Re: Honeywall Digest, Vol 14, Issue 12 (Rob McMillen)
> >>
> >>
> >> ----------------------------------------------------------------------
> >>
> >> Message: 1
> >> Date: Tue, 15 Jul 2008 08:13:48 -0400
> >> From: "Rob McMillen" <rvmcmil at gmail.com>
> >> Subject: Re: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 12
> >> To: "Mailing list for users and developers of the Honeywall"
> >>        <honeywall at public.honeynet.org>
> >> Message-ID:
> >>        <bf6b07a70807150513v4dc93f75s821532bc965cd74b at mail.gmail.com>
> >> Content-Type: text/plain; charset=ISO-8859-1
> >>
> >> OK... try following the steps in the HOWTO.  It has you building
> >> sebek; then moving the resulting tar.gz file to another directory and
> >> extracting it.  Inside this new directory you should find an
> >> sbk_install.sh and that should be the one you edit and launch.
> >>
> >> mv sebek-lin26-3.2.0b-bin.tar.gz /tmp
> >> cd /tmp
> >> tar zxf sebek-lin26-3.2.0b-bin.tar.gz
> >> cd sebek-lin26-3.2.0b-bin
> >>
> >> Rob
> >>
> >> On Mon, Jul 14, 2008 at 2:03 PM, Gayan Sahabandu <gayan.leo at gmail.com>
> >> wrote:
> >>>  this a result of editing (entering Honeypot MAC IP etc....) and
> running
> >> the
> >>> sbk_install.sh in the sebek source code directory.
> >>> Gayan
> >>
> >> ------------------------------
> >>
> >> _______________________________________________
> >> Honeywall mailing list
> >> Honeywall at public.honeynet.org
> >> https://public.honeynet.org/mailman/listinfo/honeywall
> >>
> >>
> >> End of Honeywall Digest, Vol 14, Issue 14
> >> *****************************************
> >>
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Honeywall mailing list
> > Honeywall at public.honeynet.org
> > https://public.honeynet.org/mailman/listinfo/honeywall
>
>
> --
> David Watson
> UK Honeynet Project
> www.ukhoneynet.org
> david at honeynet.org.uk
>
>
> ------------------------------
>
> _______________________________________________
> Honeywall mailing list
> Honeywall at public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/honeywall
>
>
> End of Honeywall Digest, Vol 14, Issue 15
> *****************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/honeywall/attachments/20080716/2d63d708/attachment.html


More information about the Honeywall mailing list