Snort mailing list archives

Re: Building snort-inline from CVS


From: Ilo Lorusso <sneak147 () gmail com>
Date: Mon, 6 Jul 2009 07:38:31 +0200

Its pitty as I think and im sure many others do that this would have
been a great idea to implement in large network environments, why
don't sourcefire allocate resources to this specific development as
they own both projects.

Thanks

Ilo

On Sun, Jul 5, 2009 at 10:17 PM, Will Metcalf<william.metcalf () gmail com> wrote:
I will see if I can find some time to fix in the next couple of days.
Although I have said it before and I will say it again,  the clamav
preproc was experimental, and after some experimentation we found that
really doesn't work that well because clamav is expecting to scan a
file, not a packet payload with headers/protocol data.  Not only that
but you have problems with anything bigger than 65k bytes etc.  for
the clamav preproc to be effective a lot of work would have go into
writing protocol decoders which neither Victor or I have the cycles
for.  If you want AV protection in http I suggest that you look at
HAVP it works quite well.  http://www.server-side.de/

Regards,

Will

On Sun, Jul 5, 2009 at 1:38 PM, Ilo Lorusso<sneak147 () gmail com> wrote:
Hi

I just checkout out the latest code from snort-inline trunk and i want
to compile it with clamav support.

I run autojunk.sh script then  compile but then get the following error..

../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function
'DynamicDropInline':
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1155: warning:
implicit declaration of function 'InlineDrop'
../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function
'InitDynamicPreprocessors':
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error:
'InlineMode' undeclared (first use in this function)
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: (Each
undeclared identifier is reported only once
../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: for
each function it appears in.)
make[4]: *** [sf_dynamic_plugins.o] Error 1
make[4]: Leaving directory
`/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory
`/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/plain/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/

any idea why? or how to fix..

Thanks regards

Ilo

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: