http://wtf.hijacked.us/wiki/index.php?title=OpenBSD_Anomalies&feed=atom&action=historyOpenBSD Anomalies - Revision history2024-03-28T18:30:43ZRevision history for this page on the wikiMediaWiki 1.35.0http://wtf.hijacked.us/wiki/index.php?title=OpenBSD_Anomalies&diff=261&oldid=prevJontow: 1 revision2013-01-05T02:47:04Z<p>1 revision</p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<tr class="diff-title" lang="en">
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 02:47, 5 January 2013</td>
</tr><tr><td colspan="2" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div>
</td></tr></table>Jontowhttp://wtf.hijacked.us/wiki/index.php?title=OpenBSD_Anomalies&diff=260&oldid=prevJontow: mirror original openbsd anomalies page from nsmwiki2006-12-12T15:08:14Z<p>mirror original openbsd anomalies page from nsmwiki</p>
<p><b>New page</b></p><div>== OpenBSD PCAP + VLAN tags ==<br />
<br />
* [http://www.openbsd.org/ OpenBSD's] default install does not include libpcap-based support for VLAN tags in BPF filters: this applies to [http://www.vorant.com/nsmwiki/index.php?title=Tcpdump tcpdump] as well as all programs that you compile on that system and link against the bundled [http://www.vorant.com/nsmwiki/index.php?title=Libpcap libpcap].<br />
* To resolve this, you must download and manually compile your own [http://www.vorant.com/nsmwiki/index.php?title=Libpcap libpcap]/[http://www.vorant.com/nsmwiki/index.php?title=Tcpdump tcpdump] before compiling tools such as [http://www.vorant.com/nsmwiki/index.php?title=Snort Snort].<br />
* I recommend the argument '--prefix=/usr' to the 'configure' script for both [http://www.vorant.com/nsmwiki/index.php?title=Libpcap libpcap] and [http://www.vorant.com/nsmwiki/index.php?title=Tcpdump tcpdump] to replace the bundled copies.<br />
* This particular issue is confirmed with [http://www.openbsd.org/ OpenBSD] versions [http://www.openbsd.org/39.html 3.9] and [http://www.openbsd.org/40.html 4.0] on both the sparc and i386 architectures; it probably exists in earlier versions, and potentially later, when they exist. It may be worse on platforms where the NIC does not support hardware tag interpretation.<br />
* '''When installing libpcap by hand, be sure to do it like this:'''<br />
<br />
/path/to/pcap/source# ./configure --prefix=/usr<br />
....<br />
/path/to/pcap/source# make<br />
....<br />
/path/to/pcap/source# make install-shared-so<br />
....<br />
/path/to/pcap/source# ln -s /usr/lib/libpcap.so.0.9.5 /usr/lib/libpcap.so.5.0<br />
/path/to/pcap/source# ln -s /usr/lib/libpcap.so.0.9.5 /usr/lib/libpcap.so.5<br />
/path/to/pcap/source# ldconfig -R<br />
<br />
* Once those steps are finished, proceed to installing [http://www.vorant.com/nsmwiki/index.php?title=Tcpdump tcpdump] (./configure --prefix=/usr ; make ; make install) and then [http://www.vorant.com/nsmwiki/index.php?title=Snort Snort], etc.</div>Jontow