[Snort-devel] snort-2.8.3.2 make fails

Steven Sturges steve.sturges at ...402...
Thu Jan 22 09:45:44 EST 2009


Another patch for 2.8.3.2 to handle the disable-dynamicplugin.
We'll get this into CVS and 2.8.4 RC soon.

Cheers.
-steve

Jason Wallace wrote:
> This may or may not be a concern, but I thought I should mention it...
> 
> I could be wrong, but I believe if configured with --enable-ruleperf then it
> also requires --enable-dynamicplugin, because snort will not compile
> configured like this...
> 
> ./configure --enable-ruleperf --disable-dynamicplugin
> 
> If running in IDS/P mode dynamic plugins are pretty much a must these days,
> but if your just using snort as a sniffer they are not really needed.
> 
> Thx,
> Wally
> 
> On Wed, Jan 21, 2009 at 3:00 PM, Jason Wallace <jason.r.wallace at ...2499...>wrote:
> 
>> I stumbled on this while working on an updated snort package for 2.8.3.2
>> for the Gentoo Linux distribution. Being a source based distro, most of the
>> build packages try to support as many of the --with/without --enable/disable
>> features as possible. If this is an option with little or no reason to use
>> --disable I'll just hardcode the enable option in the package until someone
>> complains. Maybe in 2.8.4 the --disable-ruleperf option should be removed
>> from ./configure --help??
>>
>> Thx,
>> Wally
>>
>>
>> On Wed, Jan 21, 2009 at 2:46 PM, Steven Sturges <
>> steve.sturges at ...402...> wrote:
>>
>>> Thanks for the report.
>>>
>>> The ruleperf configure option has been hardened in the 2.8.4
>>> code base because it provides a significant performance
>>> improvement.  Curious as to why you would choose to turn that
>>> off?
>>>
>>> Anyway, attached is a patch to address it for those that
>>> wish to disable the configure option.
>>>
>>> Cheers.
>>> -steve
>>>
>>> Jason Wallace wrote:
>>>> Hi,
>>>>
>>>> It appears that if you configure snort-2.8.3.2 with the following
>>>>
>>>> `./configure --disable-ruleperf`
>>>>
>>>> Make fails with the following error...
>>>>
>>>> gcc -DHAVE_CONFIG_H -I. -I.. -I.. -I../src -I../src/sfutil
>>>> -I/usr/include/pcap -I../src/output-plugins -I../src/detection-plugins
>>>> -I../src/dynamic-plugins -I../src/preprocessors
>>> -I../src/preprocessors/flow
>>>> -I../src/preprocessors/portscan  -I../src/preprocessors/flow/int-snort
>>>> -I../src/preprocessors/HttpInspect/include
>>> -I../src/preprocessors/Stream5
>>>> -I../src/target-based    -g -O2 -Wall -DDYNAMIC_PLUGIN -c fpdetect.c
>>>> fpdetect.c: In function `fpEvalRTNSW':
>>>> fpdetect.c:988: error: too few arguments to function
>>>> make[3]: *** [fpdetect.o] Error 1
>>>> make[3]: Leaving directory `/usr/local/src/snort-2.8.3.2/src'
>>>> make[2]: *** [all-recursive] Error 1
>>>> make[2]: Leaving directory `/usr/local/src/snort-2.8.3.2/src'
>>>> make[1]: *** [all-recursive] Error 1
>>>> make[1]: Leaving directory `/usr/local/src/snort-2.8.3.2'
>>>> make: *** [all] Error 2
>>>>
>>>> Configuring using --enable-ruleperf appears to compile correctly.
>>>>
>>>> I have tried this with a number of different --with/without
>>> --enable/disable
>>>> options with the same results.
>>>>
>>>> Can anyone else confirm this?
>>>>
>>>> Wally
>>>
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: no_dynamicplugin.diff
Type: text/x-patch
Size: 2858 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20090122/2f5a4f92/attachment.bin>


More information about the Snort-devel mailing list