[Snort-users] Patching Snort 2.4.2 with ClamAV Errors

Bill Warren bwarren at ...12173...
Wed Oct 5 06:49:43 EDT 2005


Thanks, that worked great!


Will Metcalf wrote:

>Yeah I got the same thing on sarge, I know it is kind of a crappy fix
>but if you are not using prelude just Nuke the following from
>configure.in and run autoreconf -f.  Haven't had time to get into it,
>been super swamped at my paying job, but that should fix your problem.
>dnl Prelude support
>[  --enable-prelude     Enable Prelude Hybrid IDS support],
>                want_prelude="$enableval", want_prelude=no)
>if test x$want_prelude = xyes; then
>      AM_PATH_LIBPRELUDE(0.9.0, use_prelude=yes, use_prelude=no)
>      if test "$use_prelude" = "yes"; then
>              LIBS="$LIBS ${LIBPRELUDE_LIBS}"
>              AC_DEFINE(HAVE_LIBPRELUDE,, Define whether Prelude
>support is enabled)
>      fi
>On 10/4/05, Bill Warren <bwarren at ...12173...> wrote:
>>I just downloaded the latest everything and I am getting stuck.  Any
>>ideas?  I am running Debian Sarge with all the updates.
>>tar -zxvf snort-2.4.2.tar.gz
>>cp snort-2.4.2-clamonly.diff snort-2.4.2
>>cd snort-2.4.2
>>patch -p 1 < snort-2.4.2-clamonly.diff
>>patching file configure.in
>>Hunk #1 succeeded at 859 with fuzz 2.
>>patching file src/debug.h
>>patching file src/generators.h
>>patching file src/plugbase.c
>>patching file src/preprocessors/Makefile.am
>>patching file src/preprocessors/spp_clamav.c
>>patching file src/preprocessors/spp_clamav.h
>>autoreconf -f
>>configure.in:169: warning: underquoted definition of SN_CHECK_DECL
>> run info '(automake)Extending aclocal'
>> or see http://sources.redhat.com/automake/automake.html#Extending-aclocal
>>configure.in:202: warning: underquoted definition of SN_CHECK_DECLS
>>configure.in:298: warning: underquoted definition of FAIL_MESSAGE
>>aclocal:configure.in:675: warning: macro `AM_PATH_LIBPRELUDE' not found
>>in library
>>configure.in:675: error: possibly undefined macro: AM_PATH_LIBPRELUDE
>>     If this token and others are legitimate, please use m4_pattern_allow.
>>     See the Autoconf documentation.
>>autoreconf: /usr/bin/autoconf failed with exit status: 1
>This SF.Net email is sponsored by:
>Power Architecture Resource Center: Free content, downloads, discussions,
>and more. http://solutions.newsforge.com/ibmarch.tmpl
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>Snort-users list archive:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: bwarren.vcf
Type: text/x-vcard
Size: 298 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20051005/8a94fc93/attachment.vcf>

More information about the Snort-users mailing list