[Honeywall] Re: Honeywall Digest, Vol 14, Issue 15

Gayan Sahabandu gayan.leo at gmail.com
Fri Jul 18 13:39:42 EDT 2008


Hi David / Rob,

I have done everything according to the installation guide, but I still gets
this error message.

$Installing Sebek:
[: 167: 3358371312: out of range
0 1:8960:::::::::14:3937
1 2:36864::::::::::
2 0:8960:::::::::14:2675
insmod: error inserting '876281054.o': -1 Invalid parameters
$  876281054.o install failed


Following is the content of my parameters.sh file.

DIP_PARM=a66
DMAC_PARM=a124
DPORT_PARM=a21
SPORT_PARM=a74
INT_PARM=a38
KSO_PARM=a131
ST_PARM=a15
WT_PARM=a121
MAGIC_PARM=a42
TESTING_PARM=a87
FILTER_PARAM=a133
RAND_MOD_NAME=876281054.o

Can anyone please find out what's wrong in this ?
Thanks,
Gayan


On Thu, Jul 17, 2008 at 12:44 AM, Gayan Sahabandu <gayan.leo at gmail.com>
wrote:

> Hi David,
> I got a good idea about it now after your explanation. But I still gets
> that error message. When I try to compile the script which is on
> sebek-lin26-3.2.0b-bin (sbk_install.sh). I gets the following error message
> :
>
> Installing Sebek:
> 0 1:8960:::::::::14:3491
> 1 2:36864::::::::::
> 2 0:8960:::::::::14:3532
> insmod: error inserting '14703549.o': -1 Invalid module format
> 14703549.o install failed
>
> Any idea of how to fix this problem ?
> Thanks,
> Gayan
>
>
>
>
> On 7/16/08, honeywall-request at public.honeynet.org <
> honeywall-request at public.honeynet.org> wrote:
>>
>> Send Honeywall mailing list submissions to
>>        honeywall at public.honeynet.org
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>>        https://public.honeynet.org/mailman/listinfo/honeywall
>> or, via email, send a message with subject or body 'help' to
>>        honeywall-request at public.honeynet.org
>>
>> You can reach the person managing the list at
>>        honeywall-owner at public.honeynet.org
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of Honeywall digest..."
>>
>>
>> Today's Topics:
>>
>>   1. Re: Honeywall Digest, Vol 14, Issue 14 (Gayan Sahabandu)
>>   2. Re: Re: Honeywall Digest, Vol 14, Issue 14 (David Watson)
>>
>>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Wed, 16 Jul 2008 15:52:02 +0100
>> From: "Gayan Sahabandu" <gayan.leo at gmail.com>
>> Subject: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 14
>> To: honeywall at public.honeynet.org
>> Message-ID:
>>        <f64211650807160752i102ccfc7w4065d12dd62efcc9 at mail.gmail.com>
>> Content-Type: text/plain; charset="iso-8859-1"
>>
>> Hi Rob,
>> I followed the instructions you gave me even though I couldn't figure out
>> what is "steps in the HOWTO.  It has you building sebek; " I have couple
>> of
>> questions to ask from you.
>>
>> *1. why there are two files naming as, sebek-lin26-3.2.0b and
>> sebek-lin26-3.2.0b-bin ?
>> *is those two files should be under one folder prior to executing of
>> ./sbk_install.sh script ?
>> because after I copied the content of sebek bin file to sebek 3.2 I did
>> not
>> get the previous error message. but now I have the following error
>> message.
>> *
>> 2. Sebek linux installation error.
>>
>> Installing Sebek:
>> 0 1:8960:::::::::14:3491
>> 1 2:36864::::::::::
>> 2 0:8960:::::::::14:3532
>> insmod: error inserting '14703549.o': -1 Invalid module format
>> 14703549.o install failed
>>
>> *I am sorry about asking all these questions because I am new to both
>> linux
>> as well as honeywall. Can anybody or Rob please provide any assistant to
>> solve this error.
>> Thank you,
>> Gayan*
>> *
>>
>> On Tue, Jul 15, 2008 at 5:00 PM, <honeywall-request at public.honeynet.org>
>> wrote:
>>
>> > Send Honeywall mailing list submissions to
>> >        honeywall at public.honeynet.org
>> >
>> > To subscribe or unsubscribe via the World Wide Web, visit
>> >        https://public.honeynet.org/mailman/listinfo/honeywall
>> > or, via email, send a message with subject or body 'help' to
>> >        honeywall-request at public.honeynet.org
>> >
>> > You can reach the person managing the list at
>> >        honeywall-owner at public.honeynet.org
>> >
>> > When replying, please edit your Subject line so it is more specific
>> > than "Re: Contents of Honeywall digest..."
>> >
>> >
>> > Today's Topics:
>> >
>> >   1. Re: Re: Honeywall Digest, Vol 14, Issue 12 (Rob McMillen)
>> >
>> >
>> > ----------------------------------------------------------------------
>> >
>> > Message: 1
>> > Date: Tue, 15 Jul 2008 08:13:48 -0400
>> > From: "Rob McMillen" <rvmcmil at gmail.com>
>> > Subject: Re: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 12
>> > To: "Mailing list for users and developers of the Honeywall"
>> >        <honeywall at public.honeynet.org>
>> > Message-ID:
>> >        <bf6b07a70807150513v4dc93f75s821532bc965cd74b at mail.gmail.com>
>> > Content-Type: text/plain; charset=ISO-8859-1
>> >
>> > OK... try following the steps in the HOWTO.  It has you building
>> > sebek; then moving the resulting tar.gz file to another directory and
>> > extracting it.  Inside this new directory you should find an
>> > sbk_install.sh and that should be the one you edit and launch.
>> >
>> > mv sebek-lin26-3.2.0b-bin.tar.gz /tmp
>> > cd /tmp
>> > tar zxf sebek-lin26-3.2.0b-bin.tar.gz
>> > cd sebek-lin26-3.2.0b-bin
>> >
>> > Rob
>> >
>> > On Mon, Jul 14, 2008 at 2:03 PM, Gayan Sahabandu <gayan.leo at gmail.com>
>> > wrote:
>> > >  this a result of editing (entering Honeypot MAC IP etc....) and
>> running
>> > the
>> > > sbk_install.sh in the sebek source code directory.
>> > > Gayan
>> >
>> >
>> > ------------------------------
>> >
>> > _______________________________________________
>> > Honeywall mailing list
>> > Honeywall at public.honeynet.org
>> > https://public.honeynet.org/mailman/listinfo/honeywall
>> >
>> >
>> > End of Honeywall Digest, Vol 14, Issue 14
>> > *****************************************
>> >
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL:
>> http://public.honeynet.org/pipermail/honeywall/attachments/20080716/b59b3ff9/attachment-0001.html
>>
>> ------------------------------
>>
>> Message: 2
>> Date: Wed, 16 Jul 2008 16:01:49 +0100
>> From: David Watson <david at honeynet.org.uk>
>> Subject: Re: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 14
>> To: Mailing list for users and developers of the Honeywall
>>        <honeywall at public.honeynet.org>
>> Message-ID: <487E0D5D.6000702 at honeynet.org.uk>
>> Content-Type: text/plain; charset=ISO-8859-1
>>
>> Gayan,
>>
>> The multiple files may be the source of your confusion. The first is the
>> source code tarball for Sebek (which you use to build the Sebek module
>> for a particular architecture). The second tarball (with bin in the
>> name) is the compiled binary distribution of Sebek (the thing you made
>> from the source). This only contains the code that gets installed on the
>> honeypot, rather than the entire source code.
>>
>> Make sense?
>>
>> Thanks,
>>
>> David
>>
>> Gayan Sahabandu wrote:
>> > Hi Rob,
>> > I followed the instructions you gave me even though I couldn't figure
>> out
>> > what is "steps in the HOWTO.  It has you building sebek; " I have couple
>> of
>> > questions to ask from you.
>> >
>> > *1. why there are two files naming as, sebek-lin26-3.2.0b and
>> > sebek-lin26-3.2.0b-bin ?
>> > *is those two files should be under one folder prior to executing of
>> > ./sbk_install.sh script ?
>> > because after I copied the content of sebek bin file to sebek 3.2 I did
>> not
>> > get the previous error message. but now I have the following error
>> message.
>> > *
>> > 2. Sebek linux installation error.
>> >
>> > Installing Sebek:
>> > 0 1:8960:::::::::14:3491
>> > 1 2:36864::::::::::
>> > 2 0:8960:::::::::14:3532
>> > insmod: error inserting '14703549.o': -1 Invalid module format
>> >   14703549.o install failed
>> >
>> > *I am sorry about asking all these questions because I am new to both
>> linux
>> > as well as honeywall. Can anybody or Rob please provide any assistant to
>> > solve this error.
>> > Thank you,
>> > Gayan*
>> > *
>> >
>> > On Tue, Jul 15, 2008 at 5:00 PM, <honeywall-request at public.honeynet.org
>> >
>> > wrote:
>> >
>> >> Send Honeywall mailing list submissions to
>> >>        honeywall at public.honeynet.org
>> >>
>> >> To subscribe or unsubscribe via the World Wide Web, visit
>> >>        https://public.honeynet.org/mailman/listinfo/honeywall
>> >> or, via email, send a message with subject or body 'help' to
>> >>        honeywall-request at public.honeynet.org
>> >>
>> >> You can reach the person managing the list at
>> >>        honeywall-owner at public.honeynet.org
>> >>
>> >> When replying, please edit your Subject line so it is more specific
>> >> than "Re: Contents of Honeywall digest..."
>> >>
>> >>
>> >> Today's Topics:
>> >>
>> >>   1. Re: Re: Honeywall Digest, Vol 14, Issue 12 (Rob McMillen)
>> >>
>> >>
>> >> ----------------------------------------------------------------------
>> >>
>> >> Message: 1
>> >> Date: Tue, 15 Jul 2008 08:13:48 -0400
>> >> From: "Rob McMillen" <rvmcmil at gmail.com>
>> >> Subject: Re: [Honeywall] Re: Honeywall Digest, Vol 14, Issue 12
>> >> To: "Mailing list for users and developers of the Honeywall"
>> >>        <honeywall at public.honeynet.org>
>> >> Message-ID:
>> >>        <bf6b07a70807150513v4dc93f75s821532bc965cd74b at mail.gmail.com>
>> >> Content-Type: text/plain; charset=ISO-8859-1
>> >>
>> >> OK... try following the steps in the HOWTO.  It has you building
>> >> sebek; then moving the resulting tar.gz file to another directory and
>> >> extracting it.  Inside this new directory you should find an
>> >> sbk_install.sh and that should be the one you edit and launch.
>> >>
>> >> mv sebek-lin26-3.2.0b-bin.tar.gz /tmp
>> >> cd /tmp
>> >> tar zxf sebek-lin26-3.2.0b-bin.tar.gz
>> >> cd sebek-lin26-3.2.0b-bin
>> >>
>> >> Rob
>> >>
>> >> On Mon, Jul 14, 2008 at 2:03 PM, Gayan Sahabandu <gayan.leo at gmail.com>
>> >> wrote:
>> >>>  this a result of editing (entering Honeypot MAC IP etc....) and
>> running
>> >> the
>> >>> sbk_install.sh in the sebek source code directory.
>> >>> Gayan
>> >>
>> >> ------------------------------
>> >>
>> >> _______________________________________________
>> >> Honeywall mailing list
>> >> Honeywall at public.honeynet.org
>> >> https://public.honeynet.org/mailman/listinfo/honeywall
>> >>
>> >>
>> >> End of Honeywall Digest, Vol 14, Issue 14
>> >> *****************************************
>> >>
>> >
>> >
>> > ------------------------------------------------------------------------
>> >
>> > _______________________________________________
>> > Honeywall mailing list
>> > Honeywall at public.honeynet.org
>> > https://public.honeynet.org/mailman/listinfo/honeywall
>>
>>
>> --
>> David Watson
>> UK Honeynet Project
>> www.ukhoneynet.org
>> david at honeynet.org.uk
>>
>>
>> ------------------------------
>>
>> _______________________________________________
>> Honeywall mailing list
>> Honeywall at public.honeynet.org
>> https://public.honeynet.org/mailman/listinfo/honeywall
>>
>>
>> End of Honeywall Digest, Vol 14, Issue 15
>> *****************************************
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/honeywall/attachments/20080718/f75c06dc/attachment-0001.html


More information about the Honeywall mailing list