[Snort-users] zlib and 2.8.6 problem on Ubuntu 8.04

John York YorkJ at ...7109...
Tue May 11 11:53:00 EDT 2010


I confess that I work in a Windows-only world, but dabble in *nix (hangs head).

But anyway, installing zlib1g-dev did fix the configure problem.  Now I see:
checking zlib.h usability... yes
checking zlib.h presence... yes
checking for zlib.h... yes

I still get errors when snort hits compress_depth or inspect_gzip in the http preprocessor.  Is there something else I'm missing?

Thanks
John


-----Original Message-----
From: Ryan Jordan [mailto:ryan.jordan at ...1935...] 
Sent: Tuesday, May 11, 2010 11:26 AM
To: John York
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] zlib and 2.8.6 problem on Ubuntu 8.04

You're trying to compile a program against zlib, not just link it. You
need the header files.

Since you're on Ubuntu, install the "zlib1g-dev" package. If you do it
right, you should have the file "/usr/include/zlib.h".

-Ryan

On Tue, May 11, 2010 at 10:23 AM, John York <YorkJ at ...7109...> wrote:
> I'm having trouble upgrading from 2.8.5.3 to 2.8.6.  Snort errors out,
> ERROR: /usr/local/etc/snort/snort.conf(200) => Invalid keyword 'compress_depth' for 'global' configuration.
>
> I found the earlier thread suggesting adding --enable-zlib to the ./configure command, which I did.  I still have the same problem.  The output from configure shows, in part:
> checking zlib.h usability... no
> checking zlib.h presence... no
> checking for zlib.h... no
>
> Ubuntu has zlibg1, not good enough I guess.  So, I installed zlib-1.2.5 into the default location /usr/local/zlib.  The same problem remains in both configure and snort.  I tried adding zlib to the path, no luck.  I can get snort to run be commenting out compress_depth, decompress_depth and inspect_gzip from the http preprocessor statements, but it would be good to get it fixed.
>
> Where should I install zlib so that configure can find it, or how do I tell configure where to find zlib?
>
> Thanks
> John
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list