[Snort-devel] RE: [Snort-users] beta 6 reports...

Eide, Kirk Kirk.Eide at ...135...
Thu Nov 30 13:32:25 EST 2000


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I didn't really expect the threading to work well, I just like to poke all
the options...  ;-)

My testing was being done on Solaris 2.7 with gcc-2.95.2.  The -pthread
options is just spewed out as an unrecognized option.


The issue with the include path is that the openssl .h files expect to find
the openssl .h files with <openssl/blah.h>

- -------------------------------------

1099 pagh:keide> make
gcc -DHAVE_CONFIG_H -I. -I. -I.  -DBSD_COMP -I/usr/bay1/include
-I/services/mysql/include/mysql -DENABLE_MYSQL
-I/services/openssl/include/openssl -DENABLE_SSL -g -O2 -Wall
-DENABLE_RESPONSE -DLIBNET_BIG_ENDIAN -c snort.c
In file included from spo_xml.h:33,
                 from plugbase.h:60,
                 from snort.h:70,
                 from snort.c:45:
/services/openssl/include/openssl/crypto.h:68: openssl/stack.h: No such file
or directory
/services/openssl/include/openssl/crypto.h:69: openssl/safestack.h: No such
file or directory
/services/openssl/include/openssl/crypto.h:70: openssl/opensslv.h: No such
file or directory
/services/openssl/include/openssl/crypto.h:78: openssl/symhacks.h: No such
file or directory
In file included from spo_xml.h:34,
                 from plugbase.h:60,
                 from snort.h:70,
                 from snort.c:45:
/services/openssl/include/openssl/x509.h:62: openssl/symhacks.h: No such
file or directory
/services/openssl/include/openssl/x509.h:64: openssl/buffer.h: No such file
or directory
/services/openssl/include/openssl/x509.h:67: openssl/evp.h: No such file or
directory

- -------------------------------------


- --K2


- -----Original Message-----
From: Fyodor [mailto:fygrave at ...1...]
Sent: Thursday, November 30, 2000 10:33 AM
To: Eide, Kirk
Cc: 'Martin Roesch'; snort-users; snort-dev
Subject: Re: [Snort-devel] RE: [Snort-users] beta 6 reports...



> 
>  * Building with pthreads fails even after fixing the Makefile

eek.. :) you don't need to use pthreads, the support of pthreads
is far from being functional yet. :) Thanks for the fixes though,
which platform/compiler are you using by the way? :)
(just to make sure configure could pick the right one. -pthread works
on FreeBSD/gcc 2.95.x)


>  * The configure --with-openssl isn't quite right (need to edit Makefile)

[snip]

> - ---------------------------------------------------------------------
> 
> openssl issue
> 
> ### Need to have $openssl_dir/include in path since most .h files are
> referenced by openssl/*.h
> 
> 1072 pagh:keide> diff .backup-Makefile Makefile
> 112c112
> < CPPFLAGS =  -DBSD_COMP -I/usr/bay1/include
-I/services/mysql/include/mysql
> -DENABLE_MYSQL -I/services/openssl/include/openssl -DENABLE_SSL
> - ---
> > CPPFLAGS =  -DBSD_COMP -I/usr/bay1/include
-I/services/mysql/include/mysql
> -DENABLE_MYSQL -I/services/openssl/include/openssl
> -I/services/openssl/include -DENABLE_SSL
> 

actually configure.in is done so files are expected to be referenced without
openssl prefix:

  AC_MSG_CHECKING("for openssl")
    for i in $openssl_directory; do
    if test -r $i/include/openssl/crypto.h; then
    if test -r $i/include/openssl/x509.h; then
    if test -r $i/include/openssl/x509_vfy.h; then
    if test -r $i/include/openssl/pem.h; then
    if test -r $i/include/openssl/ssl.h; then
    if test -r $i/include/openssl/err.h; then
    OPENSSL_DIR=$i
    OPENSSL_INC_DIR=$i/include
    fi fi fi fi fi
    elif test -r $i/include/crypto.h; then
    if test -r $i/include/x509.h; then
    if test -r $i/include/x509vrfy.h; then
    if test -r $i/include/pem.h; then
    if test -r $i/include/ssl.h; then
    if test -r $i/include/err.h; then
    OPENSSL_DIR=$i
    OPENSSL_INC_DIR=$i/include
    fi fi fi fi fi fi
    done

So I am not completely sure which fix is better:

expect to have openssl files in somedir/openssl/*.h (then we miss the second
case)
or fix the source to reference to those files without any prefix and supply
full path
to includes. But in this case we may run into problem with namespace
overlaps. (f.e.
if some other system would have err.h header somewhere).. Any thoughts? 
    

    I am actually unsure which distribution the second case (elif) applies
 to, my openssl source has all the includes moved to openssl dir.
 if there's a real problem with that, we could also #ifdef includes
and and would use #include <blah.h> referencies only if location of includes
with prefix fails.

- -- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0
Comment: Morgan Stanley Dean Witter Online

iQA/AwUBOiadDyrpv7t/K3BOEQIntgCguI6VrkrGFBoa5YqCoFaY6RJlGbcAoKox
yPYeDEf8dRMoWnE7ArPzEPGo
=zvGO
-----END PGP SIGNATURE-----



More information about the Snort-devel mailing list