Snort mailing list archives
Re: Compile problems
From: Dragos Ruiu <dr () kyx net>
Date: Tue, 14 Aug 2001 03:54:39 -0700
First... get a newer version of libpcap from www.tcpdump.org.... Second... make sure you install the include files using make install-incl (I think ??) Third make sure you install the libraries themselves (make install) and the ./configure script should find them automagically in /usr/local/lib... If you still have problems post back. cheers, --dr On Mon, 13 Aug 2001, Matt Miller wrote:
All, I am somewhat new to Linux, and totally new to snort. I am having trouble spotting just exactly what is going wrong with this compile. I have installed libpcap-0.4 and it seemed to take okay. Can anyone give me any advice on where to point the snort ./configure (currently --with-libpcap*=/usr/local/lib [* I am using both component lines and pointing them at the same location]), or point out what I am doing wrong? # make gcc -g -O2 -Wall -L/usr/local/lib -L/usr/lib -L/usr/lib -o snort snort.o log.o decode.o mstring.o rules.o plugbase.o sp_pattern_match.o sp_tcp_flag_check.o sp_icmp_type_check.o sp_icmp_code_check.o sp_ttl_check.o sp_ip_id_check.o sp_tcp_ack_check.o sp_tcp_seq_check.o sp_dsize_check.o spp_http_decode.o spp_portscan.o sp_ipoption_check.o sp_rpc_check.o sp_icmp_id_check.o sp_icmp_seq_check.o sp_respond.o spo_alert_syslog.o spo_log_tcpdump.o spo_database.o sp_session.o spp_defrag.o parser.o spo_alert_fast.o spo_alert_full.o spo_alert_smb.o spo_alert_unixsock.o sp_react.o spo_xml.o sp_ip_tos_check.o snprintf.o checksum.o spp_tcp_stream2.o sp_reference.o sp_ip_fragbits.o spp_anomsensor.o tag.o spp_unidecode.o codes.o strlcpyu.o strlcatu.o debug.o sp_tcp_win_check.o spp_rpc_decode.o spp_bo.o spp_telnet_negotiation.o spo_csv.o sp_ip_same_check.o sp_priority.o sp_ip_proto.o ubi_BinTree.o ubi_SplayTree.o spo_unified.o spp_stream4.o spp_frag2.o spp_arpspoof.o -lz -lpcap -lm -lnsl -lmysqlclient -lssl -lcrypto /usr/local/lib/libpcap.a(pcap-linux.o): In function `pcap_read': pcap-linux.o(.text+0xfa): undefined reference to `bpf_filter'/usr/local/lib/libpcap.a(savefile.o): In function `pcap_offline_read': savefile.o(.text+0x504): undefined reference to `bpf_filter' make: *** [snort] Error 1 [root@bigbrother snort]#
---------------------------------------- Content-Type: text/html; name="unnamed" Content-Transfer-Encoding: quoted-printable Content-Description: ---------------------------------------- -- Dragos Ruiu <dr () dursec com> dursec.com ltd. / kyx.net - we're from the future gpg/pgp key on file at wwwkeys.pgp.net or at http://dursec.com/drkey.asc _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Compile problems Matt Miller (Aug 13)
- Re: Compile problems Dragos Ruiu (Aug 14)