[Snort-devel] snort-2.8.3.2 make fails

Joel Esler eslerj at ...2499...
Wed Jan 21 20:18:49 EST 2009


IIRC -- --enable-dynamicplugin is on by default now.

Joel

On Wed, Jan 21, 2009 at 3:30 PM, Jason Wallace
<jason.r.wallace at ...2499...> wrote:
> This may or may not be a concern, but I thought I should mention it...
>
> I could be wrong, but I believe if configured with --enable-ruleperf then it
> also requires --enable-dynamicplugin, because snort will not compile
> configured like this...
>
> ./configure --enable-ruleperf --disable-dynamicplugin
>
> If running in IDS/P mode dynamic plugins are pretty much a must these days,
> but if your just using snort as a sniffer they are not really needed.
>
> Thx,
> Wally
>
> On Wed, Jan 21, 2009 at 3:00 PM, Jason Wallace <jason.r.wallace at ...2499...>
> wrote:
>>
>> I stumbled on this while working on an updated snort package for 2.8.3.2
>> for the Gentoo Linux distribution. Being a source based distro, most of the
>> build packages try to support as many of the --with/without --enable/disable
>> features as possible. If this is an option with little or no reason to use
>> --disable I'll just hardcode the enable option in the package until someone
>> complains. Maybe in 2.8.4 the --disable-ruleperf option should be removed
>> from ./configure --help??
>>
>> Thx,
>> Wally
>>
>> On Wed, Jan 21, 2009 at 2:46 PM, Steven Sturges
>> <steve.sturges at ...402...> wrote:
>>>
>>> Thanks for the report.
>>>
>>> The ruleperf configure option has been hardened in the 2.8.4
>>> code base because it provides a significant performance
>>> improvement.  Curious as to why you would choose to turn that
>>> off?
>>>
>>> Anyway, attached is a patch to address it for those that
>>> wish to disable the configure option.
>>>
>>> Cheers.
>>> -steve
>>>
>>> Jason Wallace wrote:
>>> > Hi,
>>> >
>>> > It appears that if you configure snort-2.8.3.2 with the following
>>> >
>>> > `./configure --disable-ruleperf`
>>> >
>>> > Make fails with the following error...
>>> >
>>> > gcc -DHAVE_CONFIG_H -I. -I.. -I.. -I../src -I../src/sfutil
>>> > -I/usr/include/pcap -I../src/output-plugins -I../src/detection-plugins
>>> > -I../src/dynamic-plugins -I../src/preprocessors
>>> > -I../src/preprocessors/flow
>>> > -I../src/preprocessors/portscan  -I../src/preprocessors/flow/int-snort
>>> > -I../src/preprocessors/HttpInspect/include
>>> > -I../src/preprocessors/Stream5
>>> > -I../src/target-based    -g -O2 -Wall -DDYNAMIC_PLUGIN -c fpdetect.c
>>> > fpdetect.c: In function `fpEvalRTNSW':
>>> > fpdetect.c:988: error: too few arguments to function
>>> > make[3]: *** [fpdetect.o] Error 1
>>> > make[3]: Leaving directory `/usr/local/src/snort-2.8.3.2/src'
>>> > make[2]: *** [all-recursive] Error 1
>>> > make[2]: Leaving directory `/usr/local/src/snort-2.8.3.2/src'
>>> > make[1]: *** [all-recursive] Error 1
>>> > make[1]: Leaving directory `/usr/local/src/snort-2.8.3.2'
>>> > make: *** [all] Error 2
>>> >
>>> > Configuring using --enable-ruleperf appears to compile correctly.
>>> >
>>> > I have tried this with a number of different --with/without
>>> > --enable/disable
>>> > options with the same results.
>>> >
>>> > Can anyone else confirm this?
>>> >
>>> > Wally
>>>
>>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by:
> SourcForge Community
> SourceForge wants to tell your story.
> http://p.sf.net/sfu/sf-spreadtheword
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
>




More information about the Snort-devel mailing list