[Snort-devel] snort-2.8.3.2 make fails

Jason Wallace jason.r.wallace at ...2499...
Wed Jan 21 15:30:24 EST 2009


This may or may not be a concern, but I thought I should mention it...

I could be wrong, but I believe if configured with --enable-ruleperf then it
also requires --enable-dynamicplugin, because snort will not compile
configured like this...

./configure --enable-ruleperf --disable-dynamicplugin

If running in IDS/P mode dynamic plugins are pretty much a must these days,
but if your just using snort as a sniffer they are not really needed.

Thx,
Wally

On Wed, Jan 21, 2009 at 3:00 PM, Jason Wallace <jason.r.wallace at ...2499...>wrote:

> I stumbled on this while working on an updated snort package for 2.8.3.2
> for the Gentoo Linux distribution. Being a source based distro, most of the
> build packages try to support as many of the --with/without --enable/disable
> features as possible. If this is an option with little or no reason to use
> --disable I'll just hardcode the enable option in the package until someone
> complains. Maybe in 2.8.4 the --disable-ruleperf option should be removed
> from ./configure --help??
>
> Thx,
> Wally
>
>
> On Wed, Jan 21, 2009 at 2:46 PM, Steven Sturges <
> steve.sturges at ...402...> wrote:
>
>> Thanks for the report.
>>
>> The ruleperf configure option has been hardened in the 2.8.4
>> code base because it provides a significant performance
>> improvement.  Curious as to why you would choose to turn that
>> off?
>>
>> Anyway, attached is a patch to address it for those that
>> wish to disable the configure option.
>>
>> Cheers.
>> -steve
>>
>> Jason Wallace wrote:
>> > Hi,
>> >
>> > It appears that if you configure snort-2.8.3.2 with the following
>> >
>> > `./configure --disable-ruleperf`
>> >
>> > Make fails with the following error...
>> >
>> > gcc -DHAVE_CONFIG_H -I. -I.. -I.. -I../src -I../src/sfutil
>> > -I/usr/include/pcap -I../src/output-plugins -I../src/detection-plugins
>> > -I../src/dynamic-plugins -I../src/preprocessors
>> -I../src/preprocessors/flow
>> > -I../src/preprocessors/portscan  -I../src/preprocessors/flow/int-snort
>> > -I../src/preprocessors/HttpInspect/include
>> -I../src/preprocessors/Stream5
>> > -I../src/target-based    -g -O2 -Wall -DDYNAMIC_PLUGIN -c fpdetect.c
>> > fpdetect.c: In function `fpEvalRTNSW':
>> > fpdetect.c:988: error: too few arguments to function
>> > make[3]: *** [fpdetect.o] Error 1
>> > make[3]: Leaving directory `/usr/local/src/snort-2.8.3.2/src'
>> > make[2]: *** [all-recursive] Error 1
>> > make[2]: Leaving directory `/usr/local/src/snort-2.8.3.2/src'
>> > make[1]: *** [all-recursive] Error 1
>> > make[1]: Leaving directory `/usr/local/src/snort-2.8.3.2'
>> > make: *** [all] Error 2
>> >
>> > Configuring using --enable-ruleperf appears to compile correctly.
>> >
>> > I have tried this with a number of different --with/without
>> --enable/disable
>> > options with the same results.
>> >
>> > Can anyone else confirm this?
>> >
>> > Wally
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20090121/70a1cd9f/attachment.html>


More information about the Snort-devel mailing list