[Snort-users] 32bit snort rpm

Lamont, Brian A. Brian.Lamont at ...17273...
Tue Sep 15 17:43:54 EDT 2015


So I'm a failure at building from the source rpm of daq, and pretty  darn new to building rpms, so my next attempt below is to build from source, and that didn't go well.

[root at ...17307... snort]# rpmbuild --rebuild daq-2.0.6-1.src.rpm
Installing daq-2.0.6-1.src.rpm
error: unpacking of archive failed on file /usr/src/redhat/SOURCES/daq-2.0.6.tar.gz;55f88cd3: cpio: MD5 sum mismatch
error: daq-2.0.6-1.src.rpm cannot be installed

>From source:
----------------
[root at ...17307... snort]# cd daq-2.0.6
[root at ...17307... daq-2.0.6]# vi README
[root at ...17307... daq-2.0.6]# ./configure
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
.
.  ...omitted..
..
checking libnetfilter_queue/libnetfilter_queue.h presence... no
checking for libnetfilter_queue/libnetfilter_queue.h... no
checking for linux/netfilter.h... (cached) yes
checking for pcap.h... (cached) yes
checking for pcap_lib_version... checking for pcap_lib_version in -lpcap... (cached) yes
checking for libpcap version >= "1.0.0"... no

    ERROR!  Libpcap library version >= 1.0.0  not found.
    Get it from http://www.tcpdump.org


Current version of libpcap -  same version on 64bit hosts and they work fine.
---------------------------------
[root at ...17307... daq-2.0.6]# rpm -qa |grep libpcap
libpcap-devel-0.9.4-15.el5
libpcap-0.9.4-15.el5




From: Al Lewis (allewi) [mailto:allewi at ...589...]
Sent: Tuesday, September 15, 2015 12:05 PM
To: Lamont, Brian A.; Michael Steele; snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] 32bit snort rpm

You should be able to build from source but you need the daq installed first.


Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...<mailto:allewi at ...589...>

From: Lamont, Brian A. [mailto:Brian.Lamont at ...17273...]
Sent: Tuesday, September 15, 2015 10:39 AM
To: Al Lewis (allewi); Michael Steele; snort-users at lists.sourceforge.net<mailto:snort-users at lists.sourceforge.net>
Subject: RE: [Snort-users] 32bit snort rpm

I am needing to install snort on approx.. 25 32bit Rhel (Redhat Linux) 5 servers


From: Al Lewis (allewi) [mailto:allewi at ...589...]
Sent: Monday, September 14, 2015 7:10 PM
To: Lamont, Brian A.; Michael Steele; snort-users at lists.sourceforge.net<mailto:snort-users at lists.sourceforge.net>
Subject: RE: [Snort-users] 32bit snort rpm

Are you trying to install on windows or *nix?

Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...<mailto:allewi at ...589...>

From: Lamont, Brian A. [mailto:Brian.Lamont at ...17273...]
Sent: Monday, September 14, 2015 7:00 PM
To: Michael Steele; snort-users at lists.sourceforge.net<mailto:snort-users at ...6193...sts.sourceforge.net>
Subject: Re: [Snort-users] 32bit snort rpm

But I should be able to build from source, at least according to one of the README files, correct?   I have started one build after installing the libpcap and other prereqs, and it started to take off and look like a build, then failed for the error below.   Where can I find the sfbpf library?


[root at ...17307... snort]# rpmbuild -ta snort-2.9.7.5.tar.gz
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.9801
+ umask 022
+ cd /usr/src/redhat/BUILD
+ LANG=C
+ export LANG
+ unset DISPLAY
+ cd /usr/src/redhat/BUILD
+ rm -rf snort-2.9.7.5
+ /usr/bin/gzip -dc /var/tmp/snort/snort-2.9.7.5.tar.gz

.
..
checking for INADDR_NONE... yes
checking for __FUNCTION__... yes
checking for sfbpf_compile in -lsfbpf... no

   ERROR!  sfbpf library not found, go get it from
   http://www.snort.org/.
error: Bad exit status from /var/tmp/rpm-tmp.9801 (%build)

RPM build errors:
    Bad exit status from /var/tmp/rpm-tmp.9801 (%build)



From: Michael Steele [mailto:michaels at ...9077...]
Sent: Monday, September 14, 2015 3:37 PM
To: Lamont, Brian A.
Subject: RE: [Snort-users] 32bit snort rpm

Snort is 32bit for Window, but the remainder of the support programs are 64bit. There are 32bit and 64bit installation tutorials for Windows.

Kindest regards,
Michael...

WINSNORT.com Management Team Member
--
****************** Established ~ 2001 *******************
*          Visit Us @ http://www.winsnort.com           *
*      ~~ FREE WinIDS Snort installation guides ~~      *
*               ~~ FREE support forums ~~               *
* Snort: Open Source Network IDS - http://www.snort.org *
*********************************************************

From: Lamont, Brian A. [mailto:Brian.Lamont at ...17273...]
Sent: Monday, September 14, 2015 6:22 PM
To: snort-users at lists.sourceforge.net<mailto:snort-users at ...3783...net>
Subject: [Snort-users] 32bit snort rpm

I am needing to install snort on approx.. 25 32bit Rhel 5 servers.  I see there is a 64bit rpm on the website.   Is there a 32bit package available?


Brian Lamont
Unix Systems Admin

[Mission-Systems-logo-2col]
Desk:  480 586-9986
Cell:     480 209-8751
brian.lamont at ...17273...<mailto:brian.lamont at ...17273...>

This message and/or attachments may include information subject to GD Corporate Policies 07-103 and 07-105 and is intended to be accessed only by authorized recipients.  Use, storage and transmission are governed by General Dynamics and its policies. Contractual restrictions apply to third parties.  Recipients should refer to the policies or contract to determine proper handling.  Unauthorized review, use, disclosure or distribution is prohibited.  If you are not an intended recipient, please contact the sender and destroy all copies of the original message.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150915/9e864257/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2378 bytes
Desc: image001.jpg
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150915/9e864257/attachment.jpg>


More information about the Snort-users mailing list