Re: IDS: RE: Re: [Snort-announce] Snort 1.8.1 released!

[Dragos Ruiu <dr () kyx net>]

2.6 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q:  I've got RedHat and ....

A:  Check your version of libpcap.  :) If it's not >= 0.5, then you should
    update.

2.7 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q: Where do I get the latest version of libpcap?

A: http://www.tcpdump.org/

2.8 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q: Why does building snort complain about missing references?

A: You must make libpcap with the --install-incl option or install the libpcap-d
evel rpm.
 

On Wed, 15 Aug 2001, Skeeve Stevens wrote:
> Archive: http://msgs.securepoint.com/ids
> FAQ IDS: http://www.sans.org/newlook/resources/IDFAQ/ID_FAQ.htm
> FAQ NIDS: http://www.ticm.com/kb/faq/idsfaq.html
> IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
> HELP: Having problems... email questions to ids-owner () uow edu au
> NOTE: Remove this section from reply msgs otherwise the msg will bounce.
> SPAM: DO NOT send unsolicted mail to this list.
> UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
> -----------------------------------------------------------------------------
>
> Is there a problem with this release?
>
> I did the typical ./configure; make
> and it barfs.
>
> latest Redhat 7.1 with libpcap installed prior.
>
> Is there something I am missing here?
>
> output below
> -----------------------
> carpediem{root}:149: tar -zxpf snort-1.8.1-RELEASE.tar.gz 
> carpediem{root}:150: cd snort-1.8.1-RELEASE
> carpediem{root}:151: ./configure
> creating cache ./config.cache
> checking for a BSD compatible install... /usr/bin/install -c
> checking whether build environment is sane... yes
> checking whether make sets ${MAKE}... yes
> checking for working aclocal... found
> checking for working autoconf... found
> checking for working automake... found
> checking for working autoheader... found
> checking for working makeinfo... missing
> checking for gcc... gcc
> checking whether the C compiler (gcc  ) works... yes
> checking whether the C compiler (gcc  ) is a cross-compiler... no
> checking whether we are using GNU C... yes
> checking whether gcc accepts -g... yes
> checking for gcc option to accept ANSI C... none needed
> checking for gcc... (cached) gcc
> checking whether the C compiler (gcc -g -O2 ) works... yes
> checking whether the C compiler (gcc -g -O2 ) is a cross-compiler... no
> checking whether we are using GNU C... (cached) yes
> checking whether gcc accepts -g... (cached) yes
> checking host system type... i686-pc-linux-gnu
> checking whether byte ordering is bigendian... no
> checking how to run the C preprocessor... gcc -E
> checking for strings.h... yes
> checking for string.h... yes
> checking for stdlib.h... yes
> checking for unistd.h... yes
> checking for sys/sockio.h... no
> checking for paths.h... yes
> checking for inet_ntoa in -lnsl... yes
> checking for socket in -lsocket... no
> checking whether printf must be declared... no
> checking whether fprintf must be declared... no
> checking whether syslog must be declared... no
> checking whether puts must be declared... no
> checking whether fputs must be declared... no
> checking whether fputc must be declared... no
> checking whether fopen must be declared... no
> checking whether fclose must be declared... no
> checking whether fwrite must be declared... no
> checking whether fflush must be declared... no
> checking whether getopt must be declared... no
> checking whether bzero must be declared... no
> checking whether bcopy must be declared... no
> checking whether memset must be declared... no
> checking whether strtol must be declared... no
> checking whether strcasecmp must be declared... no
> checking whether strncasecmp must be declared... no
> checking whether strerror must be declared... no
> checking whether perror must be declared... no
> checking whether socket must be declared... no
> checking whether sendto must be declared... no
> checking whether vsnprintf must be declared... no
> checking whether snprintf must be declared... no
> checking whether strtoul must be declared... no
> checking for snprintf... yes
> checking for strlcpy... no
> checking for strlcat... no
> checking for strerror... yes
> checking for floor in -lm... yes
> checking for pcap_datalink in -lpcap... yes
> checking for mysql... yes
> checking for compress in -lz... yes
> checking for odbc... no
> checking for postgresql... yes
> checking for oracle... no
> checking for openssl... yes
> checking for u_int8_t... yes
> checking for u_int16_t... yes
> checking for u_int32_t... yes
> checking for a BSD compatible install... /usr/bin/install -c
> updating cache ./config.cache
> creating ./config.status
> creating Makefile
> creating config.h
> carpediem{root}:152: make
> cd . && autoconf
> configure.in:28: warning: AC_TRY_RUN called without default to allow
> cross compiling
> /bin/sh ./config.status --recheck
> running /bin/sh ./configure  --no-create --no-recursion
> loading cache ./config.cache
> checking for a BSD compatible install... (cached) /usr/bin/install -c
> checking whether build environment is sane... yes
> checking whether make sets ${MAKE}... (cached) yes
> checking for working aclocal... found
> checking for working autoconf... found
> checking for working automake... found
> checking for working autoheader... found
> checking for working makeinfo... missing
> checking for gcc... (cached) gcc
> checking whether the C compiler (gcc  ) works... yes
> checking whether the C compiler (gcc  ) is a cross-compiler... no
> checking whether we are using GNU C... (cached) yes
> checking whether gcc accepts -g... (cached) yes
> checking for gcc option to accept ANSI C... (cached) none needed
> checking for gcc... (cached) gcc
> checking whether the C compiler (gcc -g -O2 ) works... yes
> checking whether the C compiler (gcc -g -O2 ) is a cross-compiler... no
> checking whether we are using GNU C... (cached) yes
> checking whether gcc accepts -g... (cached) yes
> checking host system type... i686-pc-linux-gnu
> checking whether byte ordering is bigendian... (cached) no
> checking how to run the C preprocessor... (cached) gcc -E
> checking for strings.h... (cached) yes
> checking for string.h... (cached) yes
> checking for stdlib.h... (cached) yes
> checking for unistd.h... (cached) yes
> checking for sys/sockio.h... (cached) no
> checking for paths.h... (cached) yes
> checking for inet_ntoa in -lnsl... (cached) yes
> checking for socket in -lsocket... (cached) no
> checking whether printf must be declared... (cached) no
> checking whether fprintf must be declared... (cached) no
> checking whether syslog must be declared... (cached) no
> checking whether puts must be declared... (cached) no
> checking whether fputs must be declared... (cached) no
> checking whether fputc must be declared... (cached) no
> checking whether fopen must be declared... (cached) no
> checking whether fclose must be declared... (cached) no
> checking whether fwrite must be declared... (cached) no
> checking whether fflush must be declared... (cached) no
> checking whether getopt must be declared... (cached) no
> checking whether bzero must be declared... (cached) no
> checking whether bcopy must be declared... (cached) no
> checking whether memset must be declared... (cached) no
> checking whether strtol must be declared... (cached) no
> checking whether strcasecmp must be declared... (cached) no
> checking whether strncasecmp must be declared... (cached) no
> checking whether strerror must be declared... (cached) no
> checking whether perror must be declared... (cached) no
> checking whether socket must be declared... (cached) no
> checking whether sendto must be declared... (cached) no
> checking whether vsnprintf must be declared... (cached) no
> checking whether snprintf must be declared... (cached) no
> checking whether strtoul must be declared... (cached) no
> checking for snprintf... (cached) yes
> checking for strlcpy... (cached) no
> checking for strlcat... (cached) no
> checking for strerror... (cached) yes
> checking for floor in -lm... (cached) yes
> checking for pcap_datalink in -lpcap... (cached) yes
> checking for mysql... yes
> checking for compress in -lz... (cached) yes
> checking for odbc... no
> checking for postgresql... yes
> checking for oracle... no
> checking for openssl... yes
> checking for u_int8_t... (cached) yes
> checking for u_int16_t... (cached) yes
> checking for u_int32_t... (cached) yes
> checking for a BSD compatible install... /usr/bin/install -c
> creating ./config.status
> cd . \
>   && CONFIG_FILES=Makefile CONFIG_HEADERS= /bin/sh ./config.status
> creating Makefile
> gcc -DHAVE_CONFIG_H -I. -I. -I. -I/usr/include/pcap
> -I/usr/include/mysql -DENABLE_MYSQL -I/usr/include/pgsql
> -DENABLE_POSTGRESQL -DENABLE_SSL  -g -O2 -Wall -c snort.c
> In file included from snort.c:45:
> snort.h:31:18: pcap.h: No such file or directory
> snort.h:32:21: net/bpf.h: No such file or directory
> In file included from snort.c:45:
> snort.h:69:25: pcap-namedb.h: No such file or directory
> In file included from snort.h:194,
>                  from snort.c:45:
> decode.h:30:18: pcap.h: No such file or directory
> In file included from snort.h:194,
>                  from snort.c:45:
> decode.h:48:25: pcap-namedb.h: No such file or directory
> make: *** [snort.o] Error 1
> carpediem{root}:153: 
> ---------------------
>
> > -----Original Message-----
> > From: owner-ids () uow edu au [mailto:owner-ids () uow edu au] On 
> > Behalf Of Grant Bayley
> > Sent: Thursday, August 16, 2001 1:28 AM
> > To: Martin Roesch
> > Cc: snort-users; snort-dev; ids () uow edu au
> > Subject: IDS: Re: [Snort-announce] Snort 1.8.1 released!
> >
> >
> > Archive: http://msgs.securepoint.com/ids
> > FAQ IDS: http://www.sans.org/newlook/resources/IDFAQ/ID_FAQ.htm
> > FAQ NIDS: http://www.ticm.com/kb/faq/idsfaq.html
> > IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
> > HELP: Having problems... email questions to ids-owner () uow edu au
> > NOTE: Remove this section from reply msgs otherwise the msg 
> > will bounce.
> > SPAM: DO NOT send unsolicted mail to this list.
> > UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
> > --------------------------------------------------------------
> > ---------------
> > Hello,
> >
> > 1.8.1 release is mirrored at:
>       
> http://the.wiretapped.net/security/network-intrusion-detection/snort/sno
> rt-1.8.1-RELEASE.tar.gz
>
> Everything else mirrored at:
>
>       
> http://the.wiretapped.net/security/network-intrusion-detection/snort/
>       
> ftp://ftp.wiretapped.net/pub/security/network-intrusion-detection/snort/
>
> Wiretapped is located in Sydney, Australia.
>
> (Martin: We'd do automatic mirroring of things like the releases &
> downloads directory, but there's no index listings available to aim lftp
> at...  Any chance of a "for mirror sites" hookup?  (We get rules and
> build snapshots from sourceforge with wget as the URLs don't change over
> time))
>
> Grant
>
> -------------------------------------------------------
> Grant Bayley                         gbayley () ausmac net
> -Admin @ AusMac Archive, Wiretapped.net, 2600 Australia
>  www.ausmac.net   www.wiretapped.net   www.2600.org.au
> -------------------------------------------------------
>
> On Wed, 15 Aug 2001, Martin Roesch wrote:
>
> > Hi everyone,
> >      Snort 1.8.1 is available on our brand new web site!  Please head 
> > on over to http://www.snort.org and have a look at the new site and 
> > check out the new release.  For the impatient, you can get the latest 
> > tarball straight from 
> > http://www.snort.org/releases/snort-1.8.1-RELEASE.tar.gz.
-- 
Dragos Ruiu <dr () dursec com>   dursec.com ltd. / kyx.net - we're from the future 
gpg/pgp key on file at wwwkeys.pgp.net or at http://dursec.com/drkey.asc

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users