Snort mailing list archives

Re: snort compilation on Tru Unix 4.0G


From: Jeff Nathan <jeff () snort org>
Date: Thu, 06 Mar 2003 11:58:34 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Stuart,

I would say that the odds are very high that the flex and bison binaries 
you compiled with the Dec compiler will work just fine.  I gather from your 
previous email that you already know Snort doesn't actually require flex, 
bison and m4 itself.  Flex and bison are required by libpcap and m4 is 
required by autoconf.

- -Jeff

- --On Thursday, March 06, 2003 10:31:15 +0000 System Operations 
<sysop () mcb net> wrote:

Yes, we are using the DEC compiler as we need it for a lot of ex DEC
stuff.  I note what you say about GCC being the 'compiler of preference'
for Snort and maybe we have to go that way.  The Dec compiler is bundled
in to the UNIX alphas so there is no added cost.  I managed to get flex
and bison etc compiled using that and assume that if they compiled then
the executable should be fine whichever compiler you use??

regards
stuart


----------------------------------------------------------------------
Dave Thornley, MCB, M & G House, Head Road, Douglas, Isle of Man IM1 5BF
sysop () mcb net        tel: +44 1624 623 841        fax: +44 1624 623 004
MCB Homepage on the MANNET Internet server:        http://www.mcb.net

On Tue, 4 Mar 2003, Jeff Nathan wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It appears as though you're using Digital's compiler.  Snort is primarly
written (at least at the moment) to be compiled using GCC and Microsoft
VisualC++.  I believe we've got an alpha somewhere but I don't know if
tru64 bundles the compiler for free or it's an add-on that must be
purchased (ala Sun).

If tru64 doesn't come with a compatible lexx/yacc/m4 etc, you might have
some success looking for precompiled packages.  I'd be very suprised if
Compaq didn't already provide such packages themselves or at least
information on where to obtain them (IBM, HP and Sun all provide
packages  and/or links to places that provide them).  In your case,
flex, bison, and  all other associated components might be a lot
friendlier if you compile  them using GCC.

- -Jeff



- --On Thursday, February 27, 2003 14:42:28 +0000 System Operations
<sysop () mcb net> wrote:


After struggling for a day to get all the components, libpcap etc and
sub-components, bison, flex and sub-sub components GNUM4 and so on,
compiled on our Alpha, snort itself fails catastrophically.  Configure
did not show any errors and I can mail the configs if required.
The first problem was that tru-unix does not allow defines where the #
is in any other position than column 1.  I fixed that by running
through the src with a sed.  However, sample output below suggests
that tru-unix may not be supported fully.  Can you possibly advise
please as we would VERY much like to try out snort on our network.
TIA
stuart mckenzie

sample make:

/data8/snort-1.9.0# make
No suffix list.
make  all-recursive
No suffix list.
Making all in src
Making all in win32
No suffix list.
Making all in output-plugins
cc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src
-I../../src/output-plugc
cc: Error: spo_alert_fast.c, line 74: Error parsing parameter list.
Found "*" w)
void AlertFast(Packet *, char *, void *, Event *);
----------------------^
cc: Error: spo_alert_fast.c, line 95: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output plugin: AlertFast is
setup...\n";
----------------------------------------------------------------------
--- ------^ cc: Error: spo_alert_fast.c, line 95: Invalid statement.
(badstmt) DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output plugin: AlertFast
    is setup...\n";
----------------------------------------------------------------------
--- ------^ cc: Error: spo_alert_fast.c, line 114: Missing ")".
(closeparen) DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output: AlertFast
Initialized\n"););
----------------------------------------------------------------------
---^ cc: Error: spo_alert_fast.c, line 114: Invalid statement.
(badstmt) DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Output: AlertFast
Initialized\n"););
----------------------------------------------------------------------
--- -^ cc: Error: spo_alert_fast.c, line 121: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Linking AlertFast functions to
call lis;
----------------------------------------------------------------------
--- ------^ cc: Error: spo_alert_fast.c, line 121: Invalid statement.
(badstmt)     DEBUG_WRAP(DebugMessage(DEBUG_INIT,"Linking AlertFast
functions to call lis;
----------------------------------------------------------------------
--- ------^ cc: Error: spo_alert_fast.c, line 129: Error parsing
parameter list. Found "*" )
void AlertFast(Packet *p, char *msg, void *arg, Event *event)
----------------------^
cc: Error: spo_alert_fast.c, line 229: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG, "ParseAlertFastArgs: %s\n",
args););
----------------------------------------------------------------------
--^ cc: Error: spo_alert_fast.c, line 229: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG, "ParseAlertFastArgs: %s\n",
args););
----------------------------------------------------------------------
---^ cc: Error: spo_alert_fast.c, line 253: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastCleanExitFunc\n"););
-----------------------------------------------------------------^ cc:
Error: spo_alert_fast.c, line 253: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastCleanExitFunc\n"););
------------------------------------------------------------------^
cc: Error: spo_alert_fast.c, line 263: Missing ")". (closeparen)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastRestartFunc\n"););
---------------------------------------------------------------^ cc:
Error: spo_alert_fast.c, line 263: Invalid statement. (badstmt)
    DEBUG_WRAP(DebugMessage(DEBUG_LOG,"AlertFastRestartFunc\n"););
----------------------------------------------------------------^ cc:
Error: spo_alert_fast.c, line 94: In this statement, "NT_OUTPUT_ALERT"
is n)
    RegisterOutputPlugin("alert_fast", NT_OUTPUT_ALERT, AlertFastInit);
---------------------------------------^
cc: Error: spo_alert_fast.c, line 116: In this statement, "pv" is not
declared.)
    pv.alert_plugin_active = 1;
----^
cc: Warning: spo_alert_fast.c, line 119: In this statement, the
referenced type)
    data = ParseAlertFastArgs(args);
------------------------------^
cc: Error: spo_alert_fast.c, line 124: In this statement, "AlertFast"
is not de)
    AddFuncToOutputList(AlertFast, NT_OUTPUT_ALERT, data);
------------------------^
cc: Error: spo_alert_fast.c, line 124: In this statement,
"NT_OUTPUT_ALERT" is )
    AddFuncToOutputList(AlertFast, NT_OUTPUT_ALERT, data);
-----------------------------------^
cc: Warning: spo_alert_fast.c, line 233: In this statement,
"OpenAlertFile(...))
        data->file = OpenAlertFile(NULL);
--------^
cc: Warning: spo_alert_fast.c, line 237: In this statement,
"mSplit(...)" of ty)
    toks = mSplit(args, " ", 2, &num_toks, 0);
----^
cc: Warning: spo_alert_fast.c, line 242: In this statement,
"ProcessFileOption()
        filename = ProcessFileOption(toks[0]);
--------^
cc: Warning: spo_alert_fast.c, line 243: In this statement,
"OpenAlertFile(...))
        data->file = OpenAlertFile(filename);
--------^
*** Exit 1
Stop.
*** Exit 1
Stop.
*** Exit 1
Stop.
*** Exit 1
Stop.
/data8/snort-1.9.0#


----------------------------------------------------------------------
MCB, M & G House, Head Road, Douglas, Isle of Man IM1 5BF
sysop () mcb net        tel: +44 1624 623 841        fax: +44 1624 623 004
MCB Homepage on the MANNET Internet server:        http://www.mcb.net



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


- --
http://www.snort.org/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- - Albert Einstein

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE+ZXm6Eqr8+Gkj0/0RAiDIAJ4hZbv0ku43qmylV9NQxu58H6SvwACeP2gd
cf1IPAfh3e5qJxqvEYw3oK8=
=SBjy
-----END PGP SIGNATURE-----




-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The
debugger  for complex code. Debugging C/C++ programs can leave you
feeling lost and  disoriented. TotalView can help you find your way.
Available on major UNIX  and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


- --
http://www.snort.org/~jeff       (pgp key available)
"Perhaps the greatest responsibility in promoting peace is that of
protecting it."
- - Me
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE+Z6htEqr8+Gkj0/0RAgEUAKCicJra+zLiD3bpa5HZlsp/1eVFQgCfU004
9SyEN0BXl1CFpj9um/E1HWA=
=23ja
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: