Re: snort 1.9 freebsd port with Spade?

[twig les <twigles () yahoo com>]

I didn't write the Spade patch.  That's why I
suggested posting to the freebsd-ports list.  


--- aaron g <click46 () operamail com> wrote:
> I've installed snort on FreeBSD many a time, but
> never from ports and never with Spade. Since snort
> doesnt need any special dohickeys to compile cleanly
> on FreeBSD, I choose to simply compile from source.
> I don't know if that works for you [some people have
> this thing with pkg_info], but it makes for
> situations like these easier. From the looks of it,
> I'd say your Spade patching was unsuccesful.    
>
> -aarong
>
> ----- Original Message -----
> From: Shane Hickey <shane () howsyournetwork com>
> Date: 03 Dec 2002 14:31:12 -0700 
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] snort 1.9 freebsd port with
> Spade?
>
>
> > I'm trying to install snort 1.9 via the ports
> collection.  I'm a recent
> > FreeBSD convert, so I'm sure there's an easy way
> to do this.  But,
> > basically, I need to patch Snort before it
> installs.  So, I did a 'make
> > extract' then untar'd the Spade tar file and ran
> the 'make' to patch the
> > Snort source.  Then I did a 'make -DWITH_MYSQL
> -DWITH_FLEXRESP' and it
> > makes it pretty dang far.  That is, I get to
> this...
> > cc  -O2 -pipe -march=pentium -Wall
> -DENABLE_RESPONSE -DLIBNET_BSDISH_OS
> > -DLIBNET_BSD_BYTE_SWAP -DHAVE_SOCKADDR_SA_LEN
> -DLIBNET_LIL_ENDIAN
> > -L/usr/local/lib -L/usr/local/lib/mysql -o snort 
> codes.o debug.o
> > decode.o log.o mstring.o parser.o  plugbase.o
> snort.o snprintf.o
> > strlcatu.o strlcpyu.o tag.o ubi_BinTree.o 
> ubi_SplayTree.o util.o
> > detect.o substr.o trie.o signature.o mempool.o 
> sf_sdlist.o perf.o
> > perf-flow.o perf-base.o perf-event.o threshold.o
> > output-plugins/libspo.a 
> detection-plugins/libspd.a
> > preprocessors/libspp.a -lz -lpcap -lm 
> -lmysqlclient -lnet
> > plugbase.o: In function `InitPreprocessors':
> > plugbase.o(.text+0x4a4): undefined reference to
> `SetupSpade'
> > *** Error code 1
> >
> > Stop in
> /usr/ports/security/snort/work/snort-1.9.0/src.
> > *** Error code 1
> >
> > Stop in
> /usr/ports/security/snort/work/snort-1.9.0/src.
> > *** Error code 1
> >
> > Stop in
> /usr/ports/security/snort/work/snort-1.9.0.
> > *** Error code 1
> >
> > I'm sure there's an easier way to do this, but I
> don't know enough
> > FreeBSD tricks yet.
> >
> > Thanks!
> >
> > Shane
-------------------------------------------------------
> > This SF.net email is sponsored by: Microsoft
> Visual Studio.NET 
> > comprehensive development tool, built to increase
> your 
> > productivity. Try a free online hosted session at:
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or
> unsubscribe:
> >
https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
>
>     
> -- 
> _______________________________________________
> Get your free email from http://mymail.operamail.com
>
> Powered by Outblaze
-------------------------------------------------------
> This SF.net email is sponsored by: Microsoft Visual
> Studio.NET 
> comprehensive development tool, built to increase
> your 
> productivity. Try a free online hosted session at:
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
If you give a man a fish, he can eat for a day
If you bludgeon him to death, you can eat the fish yourself                       
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.net email is sponsored by: Microsoft Visual Studio.NET 
comprehensive development tool, built to increase your 
productivity. Try a free online hosted session at:
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users