Snort mailing list archives

Previous By Date Next
Previous By Thread Next

Re: snort compilation on Tru Unix 4.0G

From: System Operations <sysop () mcb net>
Date: Thu, 6 Mar 2003 10:31:15 +0000 (GMT)
Yes, we are using the DEC compiler as we need it for a lot of ex DEC
stuff.  I note what you say about GCC being the 'compiler of preference'
for Snort and maybe we have to go that way.  The Dec compiler is bundled
in to the UNIX alphas so there is no added cost.  I managed to get flex
and bison etc compiled using that and assume that if they compiled then
the executable should be fine whichever compiler you use??

regards
stuart


----------------------------------------------------------------------
Dave Thornley, MCB, M & G House, Head Road, Douglas, Isle of Man IM1 5BF
sysop () mcb net        tel: +44 1624 623 841        fax: +44 1624 623 004
MCB Homepage on the MANNET Internet server:        http://www.mcb.net

On Tue, 4 Mar 2003, Jeff Nathan wrote:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It appears as though you're using Digital's compiler.  Snort is primarly 
written (at least at the moment) to be compiled using GCC and Microsoft 
VisualC++.  I believe we've got an alpha somewhere but I don't know if 
tru64 bundles the compiler for free or it's an add-on that must be 
purchased (ala Sun).

If tru64 doesn't come with a compatible lexx/yacc/m4 etc, you might have 
some success looking for precompiled packages.  I'd be very suprised if 
Compaq didn't already provide such packages themselves or at least 
information on where to obtain them (IBM, HP and Sun all provide packages 
and/or links to places that provide them).  In your case, flex, bison, and 
all other associated components might be a lot friendlier if you compile 
them using GCC.

- -Jeff



- --On Thursday, February 27, 2003 14:42:28 +0000 System Operations 
<sysop () mcb net> wrote:



After struggling for a day to get all the components, libpcap etc and
sub-components, bison, flex and sub-sub components GNUM4 and so on,
compiled on our Alpha, snort itself fails catastrophically.  Configure did
not show any errors and I can mail the configs if required.
The first problem was that tru-unix does not allow defines where the # is
in any other position than column 1.  I fixed that by running through the
src with a sed.  However, sample output below suggests that tru-unix may
not be supported fully.  Can you possibly advise please as we would VERY
much like to try out snort on our network.
TIA
stuart mckenzie

sample make:

/data8/snort-1.9.0# make
No suffix list.
make  all-recursive
No suffix list.
Making all in src
Making all in win32
No suffix list.
Making all in output-plugins
cc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src
-I../../src/output-plugc
cc: Error: spo_alert_fast.c, line 74: Error parsing parameter list. Found
"*" w)
void AlertFast(Packet *, char *, void *, Event *);
----------------------^
cc: Error: spo_alert_fast.c, line 95: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output plugin: AlertFast is
setup...\n";
-------------------------------------------------------------------------
------^ cc: Error: spo_alert_fast.c, line 95: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output plugin: AlertFast is
setup...\n";
-------------------------------------------------------------------------
------^ cc: Error: spo_alert_fast.c, line 114: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output: AlertFast
Initialized\n"););
-------------------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 114: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output: AlertFast
Initialized\n"););
-------------------------------------------------------------------------
-^ cc: Error: spo_alert_fast.c, line 121: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Linking AlertFast functions to
call lis;
-------------------------------------------------------------------------
------^ cc: Error: spo_alert_fast.c, line 121: Invalid statement.
(badstmt)     DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Linking AlertFast
functions to call lis;
-------------------------------------------------------------------------
------^ cc: Error: spo_alert_fast.c, line 129: Error parsing parameter
list. Found "*" )
void AlertFast(Packet *p, char *msg, void *arg, Event *event)
----------------------^
cc: Error: spo_alert_fast.c, line 229: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG, "ParseAlertFastArgs: %s\n",
args););
------------------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 229: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG, "ParseAlertFastArgs: %s\n",
args););
-------------------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 253: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastCleanExitFunc\n"););
-----------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 253: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastCleanExitFunc\n"););
------------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 263: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastRestartFunc\n"););
---------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 263: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastRestartFunc\n"););
----------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 94: In this statement, "NT_OUTPUT_ALERT"
is n)
    RegisterOutputPlugin("alert_fast", NT_OUTPUT_ALERT, AlertFastInit);
---------------------------------------^
cc: Error: spo_alert_fast.c, line 116: In this statement, "pv" is not
declared.)
    pv.alert_plugin_active = 1;
----^
cc: Warning: spo_alert_fast.c, line 119: In this statement, the referenced
type)
    data = ParseAlertFastArgs(args);
------------------------------^
cc: Error: spo_alert_fast.c, line 124: In this statement, "AlertFast" is
not de)
    AddFuncToOutputList(AlertFast, NT_OUTPUT_ALERT, data);
------------------------^
cc: Error: spo_alert_fast.c, line 124: In this statement,
"NT_OUTPUT_ALERT" is )
    AddFuncToOutputList(AlertFast, NT_OUTPUT_ALERT, data);
-----------------------------------^
cc: Warning: spo_alert_fast.c, line 233: In this statement,
"OpenAlertFile(...))
        data->file = OpenAlertFile(NULL);
--------^
cc: Warning: spo_alert_fast.c, line 237: In this statement, "mSplit(...)"
of ty)
    toks = mSplit(args, " ", 2, &num_toks, 0);
----^
cc: Warning: spo_alert_fast.c, line 242: In this statement,
"ProcessFileOption()
        filename = ProcessFileOption(toks[0]);
--------^
cc: Warning: spo_alert_fast.c, line 243: In this statement,
"OpenAlertFile(...))
        data->file = OpenAlertFile(filename);
--------^
*** Exit 1
Stop.
*** Exit 1
Stop.
*** Exit 1
Stop.
*** Exit 1
Stop.
/data8/snort-1.9.0#


----------------------------------------------------------------------
MCB, M & G House, Head Road, Douglas, Isle of Man IM1 5BF
sysop () mcb net        tel: +44 1624 623 841        fax: +44 1624 623 004
MCB Homepage on the MANNET Internet server:        http://www.mcb.net



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



- --
http://www.snort.org/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- - Albert Einstein
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE+ZXm6Eqr8+Gkj0/0RAiDIAJ4hZbv0ku43qmylV9NQxu58H6SvwACeP2gd
cf1IPAfh3e5qJxqvEYw3oK8=
=SBjy
-----END PGP SIGNATURE-----





-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Previous By Date Next
Previous By Thread Next

Current thread: