[Snort-users] Compile problem snort-1.6.3-beta4 with flexresp

Martin Roesch roesch at ...1...
Mon Jul 17 15:11:31 EDT 2000


Thanks Sten, that's the second report I've gotten of a problem with the new
ICMP structs.  I'll fix it for the next beta....

    -Marty

Sten Kalenda wrote:
> 
> Marty,
> 
> Good thing this renewed Snort-users list. Let's hope it wil be even more
> stable than the
> old one.
> 
> You asked the snort community to play with the new beta. I found a
> strange thing during
> the compile running RedHat 6.2. The problems are only using the
> '--enable-flexresp'
> switch. Yes, I remember what you said: 'This function is still ALPHA, so
> use with caution.'
> ;-)
> Anyway, the following is the output:
> 
> [root at ...7... snort-1.6.3-beta4]# ./configure --with-libpcap-libraries=/lib
> \
>   --with-libpcap-includes=/usr/include/pcap  \
>   --enable-flexresp
> 
> creating Makefile
> < lines deleted >
> [root at ...7... snort-1.6.3-beta4]# make
> gcc -DHAVE_CONFIG_H -I. -I. -I.   -I/usr/include/pcap
> -I/usr/include/pgsql \
> -DENABLE_POSTGRESQL  -g -O2 -Wall  -DENABLE_RESPONSE -D_BSD_SOURCE
> -D__BSD_SOURCE -D__FAVOR_BSD \
> -DHAVE_NET_ETHERNET_H -DLIBNET_LIL_ENDIAN -c snort.c
> In file included from snort.h:65,
>                  from snort.c:45:
> decode.h:498: warning: `icmp_id' redefined
> /usr/include/libnet/libnet-headers.h:308: warning: this is the location
> of the previous definition
> decode.h:499: warning: `icmp_seq' redefined
> /usr/include/libnet/libnet-headers.h:309: warning: this is the location
> of the previous definition
> decode.h:519: warning: `icmp_otime' redefined
> /usr/include/libnet/libnet-headers.h:340: warning: this is the location
> of the previous definition
> decode.h:520: warning: `icmp_rtime' redefined
> /usr/include/libnet/libnet-headers.h:342: warning: this is the location
> of the previous definition
> decode.h:521: warning: `icmp_ttime' redefined
> /usr/include/libnet/libnet-headers.h:344: warning: this is the location
> of the previous definition
> decode.h:523: warning: `icmp_mask' redefined
> /usr/include/libnet/libnet-headers.h:335: warning: this is the location
> of the previous definition
> decode.h:524: warning: `icmp_data' redefined
> /usr/include/libnet/libnet-headers.h:337: warning: this is the location
> of the previous definition
> In file included from snort.h:65,
>                  from snort.c:45:
> decode.h:478: redefinition of `struct ih_idseq'
> decode.h:485: redefinition of `struct ih_pmtu'
> decode.h:490: redefinition of `struct ih_rtradv'
> make: *** [snort.o] Error 1
> [root at ...7... snort-1.6.3-beta4]#
> 
> ============================================
> 
> [root at ...7... snort-1.6.3-beta4]# ./configure --with-libpcap-libraries=/lib
> \
>   --with-libpcap-includes=/usr/include/pcap
> creating Makefile
> creating config.h
> config.h is unchanged
> [root at ...7... snort-1.6.3-beta4]# make
> gcc -DHAVE_CONFIG_H -I. -I. -I.   -I/usr/include/pcap
> -I/usr/include/pgsql -DENABLE_POSTGRESQL  -g -O2 -Wall  -c snort.c
> < deleted lines here>
> gcc  -g -O2 -Wall  -L/lib -L/usr/lib -o snort  snort.o log.o decode.o
> mstring.o rules.o plugbase.o sp_pattern_match.o sp_tcp_flag_check.o
> sp_icmp_type_check.o sp_icmp_code_check.o sp_ttl_check.o
> sp_ip_id_check.o sp_tcp_ack_check.o sp_tcp_seq_check.o sp_dsize_check.o
> spp_http_decode.o spp_minfrag.o spp_portscan.o sp_ipoption_check.o
> sp_rpc_check.o sp_icmp_id_check.o sp_icmp_seq_check.o respond.o
> spo_alert_syslog.o spo_log_tcpdump.o sp_session.o spp_defrag.o
> spo_log_database.o spo_alert_fast.o spo_alert_full.o spo_alert_smb.o
> spo_alert_unixsock.o  -lpq -lpcap -lnsl
> [root at ...7... snort-1.6.3-beta4]#
> 
> --
> 
> Cheers,
> Sten
> 
> -= Tripple NOT encryption (3NOT) Patent Pending  =-
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch                      <roesch at ...2...>
Core R&D                         http://www.hiverworld.com
Hiverworld, Inc.       Continuous Adaptive Risk Management




More information about the Snort-users mailing list