Re: Snort 2.4 and Spade Patch 2.3.2

["Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>]

--On 30 August 2005 11:34 +0530 Vinay AR <vinay.ar () gmail com> wrote:

> Hi all,
>
> When I installed Spade 2.3 on Snort 2.4, I got the following make error.
> Can somebody please help me.
>
> packets.c: In function `ClonePacket':
> packets.c:233: error: structure has no member named `ext'
> packets.c:233: error: structure has no member named `ext'
> packets.c:233: error: structure has no member named `ext'
>
> Regards,
> VInay

The following patch to Snort will let a SPADE-patched tree build past that 
point. I'm not sure if there are any other changes required:

--- src/decode.h.packetfix      2005-08-03 14:29:33.361614236 +0100
+++ src/decode.h        2005-08-03 14:32:08.460143872 +0100
@@ -955,6 +955,14 @@
}        ICMPHdr;


+typedef struct _echoext
+{
+    u_int16_t id;
+    u_int16_t seqno;
+
+}        echoext;
+
+
typedef struct _ARPHdr
{
    u_int16_t ar_hrd;       /* format of hardware address   */
@@ -1083,6 +1091,8 @@
    UDPHdr *udph, *orig_udph;
    ICMPHdr *icmph, *orig_icmph;

+    echoext *ext;          /* ICMP echo extension struct */
+
    u_int8_t *data;         /* packet payload pointer */
    u_int16_t dsize;        /* packet payload size */
    u_int16_t alt_dsize;    /* the dsize of a packet before munging (used 
for log)*/

IIRC, this is also required when using FLoP 1.4.1 with Snort 2.4.0, too.

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users