Snort mailing list archives

Re: Building snort-inline from CVS


From: Ilo Lorusso <sneak147 () gmail com>
Date: Sun, 5 Jul 2009 22:57:04 +0200

thanks for the feed back..

On Sun, Jul 5, 2009 at 10:17 PM, Will Metcalf<william.metcalf () gmail com> wrote:
I will see if I can find some time to fix in the next couple of days.
Although I have said it before and I will say it again,  the clamav
preproc was experimental, and after some experimentation we found that
really doesn't work that well because clamav is expecting to scan a
file, not a packet payload with headers/protocol data.  Not only that
but you have problems with anything bigger than 65k bytes etc.  for
the clamav preproc to be effective a lot of work would have go into
writing protocol decoders which neither Victor or I have the cycles
for.  If you want AV protection in http I suggest that you look at
HAVP it works quite well.  http://www.server-side.de/

Regards,

Will

On Sun, Jul 5, 2009 at 1:38 PM, Ilo Lorusso<sneak147 () gmail com> wrote:
Hi

I just checkout out the latest code from snort-inline trunk and i want
to compile it with clamav support.

I run autojunk.sh script then  compile but then get the following error..

../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function
'DynamicDropInline':
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1155: warning:
implicit declaration of function 'InlineDrop'
../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function
'InitDynamicPreprocessors':
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error:
'InlineMode' undeclared (first use in this function)
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: (Each
undeclared identifier is reported only once
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: for
each function it appears in.)
make[4]: *** [sf_dynamic_plugins.o] Error 1
make[4]: Leaving directory
`/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory
`/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/plain/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/

any idea why? or how to fix..

Thanks regards

Ilo

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: