Re: Compile problems

[Dragos Ruiu <dr () kyx net>]

First... get a newer version of libpcap from www.tcpdump.org....
Second... make sure you install the include files using 
make install-incl (I think ??)
Third make sure you install the libraries themselves (make install)
and the ./configure script should find them automagically in /usr/local/lib...

If you still have problems post back.

cheers,
--dr

On Mon, 13 Aug 2001, Matt Miller wrote:
> All, 
> I am somewhat new to Linux, and totally new to snort.  I am having trouble
> spotting just exactly what is going wrong with this compile.  I have
> installed libpcap-0.4 and it seemed to take okay.  Can anyone give me any
> advice on where to point the snort ./configure (currently
> --with-libpcap*=/usr/local/lib [* I am using both component lines and
> pointing them at the same location]), or point out what I am doing wrong?
>
> # make
> gcc  -g -O2 -Wall -L/usr/local/lib -L/usr/lib -L/usr/lib -o snort  snort.o
> log.o 
> decode.o mstring.o rules.o plugbase.o sp_pattern_match.o sp_tcp_flag_check.o
> sp_icmp_type_check.o sp_icmp_code_check.o sp_ttl_check.o sp_ip_id_check.o
> sp_tcp_ack_check.o sp_tcp_seq_check.o sp_dsize_check.o spp_http_decode.o
> spp_portscan.o sp_ipoption_check.o sp_rpc_check.o sp_icmp_id_check.o
> sp_icmp_seq_check.o sp_respond.o spo_alert_syslog.o spo_log_tcpdump.o
> spo_database.o sp_session.o spp_defrag.o parser.o spo_alert_fast.o
> spo_alert_full.o spo_alert_smb.o spo_alert_unixsock.o sp_react.o spo_xml.o
> sp_ip_tos_check.o snprintf.o checksum.o spp_tcp_stream2.o sp_reference.o
> sp_ip_fragbits.o spp_anomsensor.o tag.o spp_unidecode.o codes.o strlcpyu.o
> strlcatu.o debug.o sp_tcp_win_check.o spp_rpc_decode.o spp_bo.o
> spp_telnet_negotiation.o spo_csv.o sp_ip_same_check.o sp_priority.o
> sp_ip_proto.o ubi_BinTree.o ubi_SplayTree.o spo_unified.o spp_stream4.o
> spp_frag2.o spp_arpspoof.o  -lz -lpcap -lm -lnsl  -lmysqlclient -lssl
> -lcrypto
> /usr/local/lib/libpcap.a(pcap-linux.o): In function `pcap_read':
> pcap-linux.o(.text+0xfa): 
> undefined reference to `bpf_filter'/usr/local/lib/libpcap.a(savefile.o): 
> In function `pcap_offline_read':
> savefile.o(.text+0x504): 
> undefined reference to `bpf_filter' make: 
> *** [snort]
> Error 1 
> [root@bigbrother snort]#        

----------------------------------------
Content-Type: text/html; name="unnamed"
Content-Transfer-Encoding: quoted-printable
Content-Description: 
----------------------------------------

-- 
Dragos Ruiu <dr () dursec com>   dursec.com ltd. / kyx.net - we're from the future 
gpg/pgp key on file at wwwkeys.pgp.net or at http://dursec.com/drkey.asc

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users