I've installed snort on FreeBSD many a time, but never from ports and never with Spade. Since snort doesnt need any special dohickeys to compile cleanly on FreeBSD, I choose to simply compile from source. I don't know if that works for you [some people have this thing with pkg_info], but it makes for situations like these easier. From the looks of it, I'd say your Spade patching was unsuccesful.

-aarong

----- Original Message -----
From: Shane Hickey <shanehowsyournetwork.com>
Date: 03 Dec 2002 14:31:12 -0700
To: snort-userslists.sourceforge.net
Subject: [Snort-users] snort 1.9 freebsd port with Spade?

> I'm trying to install snort 1.9 via the ports collection. I'm a recent
> FreeBSD convert, so I'm sure there's an easy way to do this. But,
> basically, I need to patch Snort before it installs. So, I did a 'make
> extract' then untar'd the Spade tar file and ran the 'make' to patch the
> Snort source. Then I did a 'make -DWITH_MYSQL -DWITH_FLEXRESP' and it
> makes it pretty dang far. That is, I get to this...
>
> cc -O2 -pipe -march=pentium -Wall -DENABLE_RESPONSE -DLIBNET_BSDISH_OS
> -DLIBNET_BSD_BYTE_SWAP -DHAVE_SOCKADDR_SA_LEN -DLIBNET_LIL_ENDIAN
> -L/usr/local/lib -L/usr/local/lib/mysql -o snort codes.o debug.o
> decode.o log.o mstring.o parser.o plugbase.o snort.o snprintf.o
> strlcatu.o strlcpyu.o tag.o ubi_BinTree.o ubi_SplayTree.o util.o
> detect.o substr.o trie.o signature.o mempool.o sf_sdlist.o perf.o
> perf-flow.o perf-base.o perf-event.o threshold.o
> output-plugins/libspo.a detection-plugins/libspd.a
> preprocessors/libspp.a -lz -lpcap -lm -lmysqlclient -lnet
> plugbase.o: In function `InitPreprocessors':
> plugbase.o(.text+0x4a4): undefined reference to `SetupSpade'
> *** Error code 1
>
> Stop in /usr/ports/security/snort/work/snort-1.9.0/src.
> *** Error code 1
>
> Stop in /usr/ports/security/snort/work/snort-1.9.0/src.
> *** Error code 1
>
> Stop in /usr/ports/security/snort/work/snort-1.9.0.
> *** Error code 1
>
> I'm sure there's an easier way to do this, but I don't know enough
> FreeBSD tricks yet.
>
> Thanks!
>
> Shane
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Microsoft Visual Studio.NET
> comprehensive development tool, built to increase your
> productivity. Try a free online hosted session at:
> http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
> _______________________________________________
> Snort-users mailing list
> Snort-userslists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>

-- 
_______________________________________________
Get your free email from http://mymail.operamail.com
Powered by Outblaze
-------------------------------------------------------
This SF.net email is sponsored by: Microsoft Visual Studio.NET 
comprehensive development tool, built to increase your 
productivity. Try a free online hosted session at:
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]