[Snort-devel] Rules.c error in latest cvs tree error.

Martin Roesch roesch at ...48...
Mon Oct 23 12:40:55 EDT 2000


Yeah, this needs to be fixed since isblank doesn't exist on Solaris.  You can
substitute the "isblank" check sequence with the following:

138c138
<         while( isblank((int) *index) )
---
>         while( *index == ' ' || *index == '\t' )


That should do it. :)

    -Marty

Derrick wrote:
> 
> Hello,
> 
> I am new to the list but ran into this problem tonight while setting up
> snort on a Solaris 7 sparc box.
> Using the latest CVS version of snort I found this problem.
> /rules.c/1.10/Thu Oct 12 07:12:01 2000//
> /rules.h/1.4/Thu Oct 12 07:12:01 2000//
> 
> gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP -I/usr/local/mysql/include -DEN
> ABLE_MYSQL -I/usr/local/ssl/include -DENABLE_SSL  -g -O2 -Wall  -c rules.c
> rules.c: In function `ParseRulesFile':
> rules.c:138: warning: implicit declaration of function `isblank'
> 
> gcc  -g -O2 -Wall  -L/usr/local/mysql/lib -L/usr/local/ssl/lib -o snort
> snort.o log.o decode.o mstring.o rules.o plugbase.o sp_pattern_match.o
> sp_tcp_flag_check.o sp_icmp_type_check.o sp_icmp_code_check.o sp_ttl_check.o
> sp_ip_id_check.o sp_tcp_ack_check.o sp_tcp_seq_check.o sp_dsize_check.o
> spp_http_decode.o spp_minfrag.o spp_portscan.o sp_ipoption_check.o
> sp_rpc_check.o sp_icmp_id_check.o sp_icmp_seq_check.o sp_respond.o
> spo_alert_syslog.o spo_log_tcpdump.o spo_database.o sp_session.o
> spp_defrag.o parser.o spo_alert_fast.o spo_alert_full.o spo_alert_smb.o
> spo_alert_unixsock.o sp_react.o spo_xml.o sp_ip_tos_check.o
> pp_tcp_stream.o  -lpcap -lsocket -lnsl  -lmysqlclient -lssl -lcrypto
> Undefined                       first referenced
>  symbol                             in file
> floor
> /usr/local/mysql/lib/libmysqlclient.a(password.o)
> isblank                             rules.o
> ld: fatal: Symbol referencing errors. No output written to snort
> 
> >From what I can tell the isblank call on line 138 of rules.c is new from the
> 1.6.3 version and this function is not native in Solaris. What other package
> or library do I need to have installed for this function to work ?
> 
> Thanks,
> Derrick
> 
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-devel

-- 
Martin Roesch
roesch at ...48...
http://www.snort.org



More information about the Snort-devel mailing list