[Snort-devel] 2.6.1.4 decode.h change breaks flexresp2 support

Steven Sturges steve.sturges at ...402...
Tue Apr 24 15:28:49 EDT 2007


Hi Richard--

This issue has already been addressed in CVS and will be included in
the next release of Snort.  You can grab the latest code using the
SNORT_2_6_1 cvs repository.

Cheers.
-steve

Richard Bejtlich wrote:
> Hello,
> 
> cel433:/usr/local/src/snort-2.6.1.4# uname -a
> FreeBSD cel433.taosecurity.com 6.1-SECURITY FreeBSD 6.1-SECURITY #0:
> Wed Feb 14 15:33:28 UTC 2007
> root at ...2934...:/usr/obj/usr/src/sys/GENERIC  i386
> 
> cel433:/usr/local/src/snort-2.6.1.4# ./configure --enable-flexresp2
> --enable-dynamicplugin --enable-timestats --enable-perfprofiling
> --with-mysql=/usr/local --prefix=/usr/local/snort-2.6.1.4
> 
> cel433:/usr/local/src/snort-2.6.1.4# make
> 
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src
> -I../../src/sfutil  -I../../src/output-plugins
> -I../../src/detection-plugins -I../../src/dynamic-plugins
> -I../../src/preprocessors -I../../src/preprocessors/flow
> -I../../src/preprocessors/portscan
> -I../../src/preprocessors/flow/int-snort
> -I../../src/preprocessors/HttpInspect/include
> -I../../src/preprocessors/Stream5   -I/usr/local/include
> -I/usr/local/include/mysql -DENABLE_MYSQL -DENABLE_RESPONSE2
> -I/usr/local/include  -g -O2 -Wall -DDYNAMIC_PLUGIN -DTIMESTATS
> -DPERF_PROFILING -c sp_respond2.c
> In file included from sp_respond2.c:114:
> ../../src/decode.h:889: error: redefinition of `struct ip6_hdr'
> *** Error code 1
> 
> Stop in /usr/local/src/snort-2.6.1.4/src/detection-plugins.
> *** Error code 1
> 
> Stop in /usr/local/src/snort-2.6.1.4/src.
> *** Error code 1
> 
> Stop in /usr/local/src/snort-2.6.1.4.
> *** Error code 1
> 
> Stop in /usr/local/src/snort-2.6.1.4.
> 
> This change appears responsible?
> 
> http://cvs.snort.org/viewcvs.cgi/snort/src/decode.h.diff?r1=1.94.2.8&r2=1.94.2.9&only_with_tag=SNORT_2_6_1
> 
> 
> I'm not sure if flexresp2 is supported, but I figured I would report this.
> 
> Thank you,
> 
> Richard
> 
> PS: Forgive me for compiling in MySQL support.  It's for a test, not
> production.  :)
> 




More information about the Snort-devel mailing list