Snort mailing list archives
Re: Building snort-inline from CVS
From: Ilo Lorusso <sneak147 () gmail com>
Date: Sun, 5 Jul 2009 22:57:04 +0200
thanks for the feed back.. On Sun, Jul 5, 2009 at 10:17 PM, Will Metcalf<william.metcalf () gmail com> wrote:
I will see if I can find some time to fix in the next couple of days. Although I have said it before and I will say it again, the clamav preproc was experimental, and after some experimentation we found that really doesn't work that well because clamav is expecting to scan a file, not a packet payload with headers/protocol data. Not only that but you have problems with anything bigger than 65k bytes etc. for the clamav preproc to be effective a lot of work would have go into writing protocol decoders which neither Victor or I have the cycles for. If you want AV protection in http I suggest that you look at HAVP it works quite well. http://www.server-side.de/ Regards, Will On Sun, Jul 5, 2009 at 1:38 PM, Ilo Lorusso<sneak147 () gmail com> wrote:Hi I just checkout out the latest code from snort-inline trunk and i want to compile it with clamav support. I run autojunk.sh script then compile but then get the following error.. ../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function 'DynamicDropInline': ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1155: warning: implicit declaration of function 'InlineDrop' ../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function 'InitDynamicPreprocessors': ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: 'InlineMode' undeclared (first use in this function) ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: (Each undeclared identifier is reported only once ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: for each function it appears in.) make[4]: *** [sf_dynamic_plugins.o] Error 1 make[4]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/plain/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/ any idea why? or how to fix.. Thanks regards Ilo ------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Building snort-inline from CVS Ilo Lorusso (Jul 05)
- Re: Building snort-inline from CVS Will Metcalf (Jul 05)
- Re: Building snort-inline from CVS Joel Esler (Jul 05)
- Re: Building snort-inline from CVS Will Metcalf (Jul 05)
- Re: Building snort-inline from CVS Ilo Lorusso (Jul 05)
- Re: Building snort-inline from CVS Ilo Lorusso (Jul 05)
- Re: Building snort-inline from CVS Martin Roesch (Jul 06)
- Re: Building snort-inline from CVS Ilo Lorusso (Jul 06)
- Re: Building snort-inline from CVS Joel Esler (Jul 05)
- Re: Building snort-inline from CVS Edward Bjarte Fjellskål (Jul 06)
- Re: Building snort-inline from CVS Will Metcalf (Jul 05)