[Snort-devel] Solaris 8 crash

Steven Rudolph srudolph at ...1213...
Tue Apr 8 12:38:04 EDT 2003


Hello all,
I am attempting to run Snort 2.0rc4:
Ultra 5 SPARC
Solaris 8
Configure: ./configure --with-mysql=/usr/local/mysql
--with-libpcap-libraries=/usr/src/libpcap-0.7.1
--with-libpacp-includes=/usr/src/libpcap-0.7.1

Pre-processors:
Frag2
stream4: detect_scans, disable_evasion_alerts
stream4_reassemble
http_decode: 80 unicode iis_alt_unicode double_encode iis_flip_slash
full_whitespace
rpc_decode: 111 32771
bo
telnet_decode
conversation: allowed_ip_protocols all, timeout 60, max_conversations
3000
portscan2: scanners_max 256, targets_max 1024, target_limit 5,
port_limit 20, timeout 60

Rules:
Using the rule set that came with 2.0rc4.

Output plugins:
output database: alert, mysql, user=snort password=snort dbname=snort
host=xxx.yyy.zzz.aaa

Startup:
/usr/local/bin/snort -o -i qfe0 -l /var/log/snort -g snort -u snort -m
007 -c /etc/snort/snort.conf -z -D

There is no snort error or core files.

I attempt to compile with --enable-debug and I get this error:

gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src
-I../../src/output-plugins -I../../src/detection-plugins
-I../../src/preprocessors  -DBSD_COMP -I/usr/local/mysql/include/mysql
-DENABLE_MYSQL  -O0 -DDEBUG -g -c `test -f 'sp_byte_check.c' || echo
'./'`sp_byte_check.c
sp_byte_check.c: In function `ByteTest':
sp_byte_check.c:564: `offset' undeclared (first use in this function)
sp_byte_check.c:564: (Each undeclared identifier is reported only once
sp_byte_check.c:564: for each function it appears in.)
make[3]: *** [sp_byte_check.o] Error 1
make[3]: Leaving directory
`/usr/share/src/snort-2.0.0rc4/src/detection-plugins'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/share/src/snort-2.0.0rc4/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/share/src/snort-2.0.0rc4'
make: *** [all] Error 2



Steve Rudolph, CCSA, CCSE
Network Security Engineer
Internet Operations Center

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3213 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030408/1284a4f7/attachment.bin>


More information about the Snort-devel mailing list