[ARGUS] Maybe SUSE linux kernel and bits :-)

[Peter Van Epp]

	Mike asked if I would put up a tarball of the Linux kernel I'm running
so I have done so (and expect some more people may be interested). At
newfraser.sfu.ca in  /pub/unix/argus you will find:

-rw-r--r--   1 vanepp   users      12800 Nov  3 13:29 etc_modprobe.conf
-rw-r--r--   1 vanepp   users     509570 Nov  3 13:19 libpcap-0.8.1.tar.gz
-rw-r--r--   1 vanepp   users    47993834 Nov  3 13:22 linux-2.6.5-7.108.tar.gz
-rw-r--r--   1 vanepp   users       9176 Nov  3 13:28 pcap-int.h
-rw-r--r--   1 vanepp   users      64482 Nov  3 13:28 pcap-linux.c

	This in theory (but perhaps not in practice if there are more kernel
bits that need including :-)) is the linux2.6.5-7.108 kernel with the 
ring buffer code patched in, the appropriately modified libpcap (which needs
to be configured/compiled/installed in the argus directory and then have 
/usr/local/include/pcap-bpf.h copied into /usr/local/include/net/bpf.h (or
configure fixed to deal with the new .h file, I was lazy :-)). In 
etc_modprobe.conf (which is really /etc/modprobe.conf) are the configure 
options (set the SysKonnect cards in to Manual FDX for the tap and boost the 
ring buffers to 65 megs) that I think should get picked up on boot (otherwise 
you may need to run modprobe somehow, but I don't know how :-)). The 2 pcap 
files are the ring code that is already in the libpcap-0.8.1.tar.gz file just 
so you can see what changed. This works with argus-2.0.6.fixes.1 as normal 
(the advanced may wish to channel bond the 2 cards together with the Linix 
channel bonding code, but I haven't done that yet). Good luck! 
	You can ask, but the fellow who knows all is gone for a month so you 
may not get an answer :-) If more bits are needed I do have the machine this 
came from whose /usr/src directory looks like this:

sniffer:/usr/src # ls -l 
total 211547
drwxr-xr-x   7 root root       304 Oct 22 09:03 .
drwxr-xr-x  12 root root       344 Oct 22 04:58 ..
drwxr-xr-x   4 root root       160 Oct 25 13:01 build
drwxr-xr-x  22 root root       672 Oct 22 04:56 kernel-modules
lrwxrwxrwx   1 root root        17 Oct 22 04:55 linux -> linux-2.6.5-7.108
drwxr-xr-x  20 root root       712 Oct 22 04:55 linux-2.6.5-7.108
drwxr-xr-x   3 root root        72 Oct 22 04:54 linux-2.6.5-7.108-obj
-rw-r--r--   1 root root 216412160 Oct 22 09:02 linux-2.6.5-7.108.tar
lrwxrwxrwx   1 root root        21 Oct 22 04:55 linux-obj -> linux-2.6.5-7.108-obj
drwxr-xr-x   7 root root       168 Oct 22 05:00 packages

	the tar is this directory:

linux-2.6.5-7.108

	if it also needs build and kernel-modules I can put those up too.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada