Re: OpenBSD 4.8 / Snort 2.9.0.3 -- libsf_engine.so missing

[Nigel Houghton <nhoughton () sourcefire com>]

We have been working on providing the shared object rules for OpenBSD 
as part of the supported platforms in the rule releases. We had a 
similar problem with the engine not making a shared object. We have 
solved this problem, we will have a blog post up sometime today that 
describes the issue and presents the solution.

Expect OpenBSD shared object rules pretty soon. Maybe not in the next 
rule release, but shortly thereafter. We still have some testing to do 
with them.

Stay tuned.

On Sun, 02 Jan 2011 20:51:45 -0500, Randal T. Rioux wrote:
> Subject hijacked from:
> Re: [Snort-users] OpenBSD 4.7 / Snort 2.9 -- libsf_engine.so missing
>
> On 10/15/2010 9:03 AM, Russ Combs wrote:
> > I'm guessing you don't have
> > src/dynamic-plugins/sf_engine/.libs/libsf_engine.so in your build tree
> > because libtool decided it couldn't be created.  Double check your build
> > output, maybe there is a clue.
>
> Resurrecting this thread because there is still no love for OpenBSD.
>
> Same error with OpenBSD 4.8 (AMD64) and Snort 2.9.0.3. My progress is
> here: https://www.procyonlabs.com/guides/openbsd/snort/
>
> Scroll to the end. Suggestions are welcome.
>
> Oh, and this is the folder contents:
>
> # ls /usr/local/lib/snort_dynamicengine/
> libsf_engine.a    libsf_engine.la
>
> Thanks!
> Randy
>
> -- 
> Disclaimer:
>
> By sending an email to ANY of my addresses you are agreeing that:
>
> 1. I am, by definition, "the intended recipient"
> 2. All information in the email is mine to do with as I see fit
> 3. I will take the contents as representing the views of your company
> 4. If your email is an "Out of Office" reply on a mailing list, I will
> social engineer your company
> 5. This notification overrides any disclaimer or statement of
> confidentiality that may be included on your message
>
> Further, you understand that if any of the following conditions are met
> that you are indeed, a bag of douche:
>
> 1. Your message identifies the device you sent it from
> 2. You messed up the thread by top-posting
------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database 
> environment, and, 
> should the need arise, upgrade to a full multi-node Oracle RAC database 
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-sourcefire.blogspot.com && http://labs.snort.org/

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users