[Honeywall] Re: Honeywall Digest, Vol 27, Issue 1

Jefferson, Shawn Shawn.Jefferson at bcferries.com
Wed Aug 5 15:23:01 EDT 2009

Trying with Ubuntu 8.10 server, I get these compile time errors:

./gen_fudge.pl > ./src/fudge.h
cp ./sbk_install.sh ./src
cp ./parameters.sh  ./src
cd ./src; make -C /lib/modules/2.6.27-14-server/build SUBDIRS=/home/pdell/sebek/src modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.27-14-server'
  CC [M]  /home/pdell/sebek/src/sebek.o
In file included from /home/pdell/sebek/src/sebek.h:50,
                 from /home/pdell/sebek/src/sebek.c:23:
/home/pdell/sebek/src/util.h:109: error: expected '=', ',', ';', 'asm' or '__attribute__' before '*' token
/home/pdell/sebek/src/sebek.c:39: error: expected '=', ',', ';', 'asm' or '__attribute__' before '*' token
make[2]: *** [/home/pdell/sebek/src/sebek.o] Error 1
make[1]: *** [_module_/home/pdell/sebek/src] Error 2
make[1]: Leaving directory `/usr/src/linux-headers-2.6.27-14-server'
make: *** [sebek] Error 2

From: honeywall-bounces at public.honeynet.org [mailto:honeywall-bounces at public.honeynet.org] On Behalf Of wira
Sent: Wednesday, August 05, 2009 11:05 AM
To: honeywall at public.honeynet.org
Subject: [Honeywall] Re: Honeywall Digest, Vol 27, Issue 1

Could please paste the error links or error messages that you got?. It would be easier for me and others to give their solutions precisely.
On Wed, Aug 5, 2009 at 10:00 AM, <honeywall-request at public.honeynet.org<mailto:honeywall-request at public.honeynet.org>> wrote:
Send Honeywall mailing list submissions to
       honeywall at public.honeynet.org<mailto:honeywall at public.honeynet.org>

To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to
       honeywall-request at public.honeynet.org<mailto:honeywall-request at public.honeynet.org>

You can reach the person managing the list at
       honeywall-owner at public.honeynet.org<mailto:honeywall-owner at public.honeynet.org>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Honeywall digest..."

Today's Topics:

  1. Sebek Questions (Jefferson, Shawn)


Message: 1
Date: Tue, 4 Aug 2009 14:45:58 -0600
From: "Jefferson, Shawn" <Shawn.Jefferson at bcferries.com<mailto:Shawn.Jefferson at bcferries.com>>
Subject: [Honeywall] Sebek Questions
To: Mailing list for users and developers of the Honeywall
       <honeywall at public.honeynet.org<mailto:honeywall at public.honeynet.org>>
       <D05BDFB6A6F4EE43ABE62D1A7170AF37127C71E6BF at HEXBCFMBVS01.exchange.bcferries.corp>

Content-Type: text/plain; charset="us-ascii"

Hi, a couple of questions:

I'm trying to get Sebek installed on Ubuntu, but I'm having some problems.  I swore I compiled and installed in on 8.04 awhile ago, but can't seem to get it to compile now.  The configure script complains about missing include files.  I have installed the linux-headers-server package.  Is there a magical combination of Ubuntu version/kernel version that works with the latest development trunk (version 33 I think).  I did get it to compile with one combination of Ubuntu version and kernel, but the module seg faulted every time when inserting it with the sbk_install script.

Another question, my Honeywall is sending me alerts on outbound connection attempts.  I have a Windows XP honeypot that likes to broadcast to .255 for name resolution and this is sending many alerts per day.  Has anyone done anything to ignore these, or have any suggestions?

Shawn Jefferson

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/honeywall/attachments/20090804/b9fa8688/attachment-0001.html


Honeywall mailing list
Honeywall at public.honeynet.org<mailto:Honeywall at public.honeynet.org>

End of Honeywall Digest, Vol 27, Issue 1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/honeywall/attachments/20090805/90c3b410/attachment.html

More information about the Honeywall mailing list