Anyone have any exprience with Sentinel?  
http://www.packetfactory.net/Projects/sentinel/

E-mail to the contact address bounces.  Nice.

I'm trying to build sentinel on a Red Hat Linux 7.2 machine (kernel 
2.4.16).  

I had to modify the Makefile to point to all the silly header locations 
that Red Hat uses:

CFLAGS=-Wall -I. -I/usr/local/include -I/usr/include -I/usr/include/pcap 
-I/usr/include/pcap/net `libnet-config --defines`

This helped get me further along in the build process, but now I'm dying 
here:

gcc -Wall -I. -I/usr/local/include -I/usr/include -I/usr/include/pcap 
-I/usr/include/pcap/net `libnet-config --defines`   -c -o detect.o 
detect.c
detect.c: In function `thread_init':
detect.c:124: parse error before `{'
detect.c:125: parse error before `{'
make: *** [detect.o] Error 1

I've tried to build using both:

gcc version 2.96 20000731 (Red Hat Linux 7.1 2.96-98)

-and-

Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.0.4/specs
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man 
--infodir=/usr/share/info --enable-shared --enable-threads=posix 
--disable-checking --host=i386-redhat-linux --with-system-zlib
Thread model: posix
gcc version 3.0.4 (Red Hat Linux 7.2 3.0.4-1)

I can't see anything wrong with the lines in detect.c (I'm not a real C
programmer, so I may be missing something obvious):

void thread_init()
{
  tag = 0;
  th_mutex = PTHREAD_MUTEX_INITIALIZER;
  local_mutex = PTHREAD_COND_INITIALIZER;
}


Any ideas or hints here?  Thanks!

-- 
Chuck Milam
chuck at redroot.org