OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: twig les (twigles_at_yahoo.com)
Date: Tue Dec 03 2002 - 18:03:34 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I didn't write the Spade patch. That's why I
    suggested posting to the freebsd-ports list.

    --- aaron g <click46operamail.com> wrote:
    > I've installed snort on FreeBSD many a time, but
    > never from ports and never with Spade. Since snort
    > doesnt need any special dohickeys to compile cleanly
    > on FreeBSD, I choose to simply compile from source.
    > I don't know if that works for you [some people have
    > this thing with pkg_info], but it makes for
    > situations like these easier. From the looks of it,
    > I'd say your Spade patching was unsuccesful.
    >
    > -aarong
    >
    > ----- Original Message -----
    > From: Shane Hickey <shanehowsyournetwork.com>
    > Date: 03 Dec 2002 14:31:12 -0700
    > To: snort-userslists.sourceforge.net
    > Subject: [Snort-users] snort 1.9 freebsd port with
    > Spade?
    >
    >
    > > I'm trying to install snort 1.9 via the ports
    > collection. I'm a recent
    > > FreeBSD convert, so I'm sure there's an easy way
    > to do this. But,
    > > basically, I need to patch Snort before it
    > installs. So, I did a 'make
    > > extract' then untar'd the Spade tar file and ran
    > the 'make' to patch the
    > > Snort source. Then I did a 'make -DWITH_MYSQL
    > -DWITH_FLEXRESP' and it
    > > makes it pretty dang far. That is, I get to
    > this...
    > >
    > > cc -O2 -pipe -march=pentium -Wall
    > -DENABLE_RESPONSE -DLIBNET_BSDISH_OS
    > > -DLIBNET_BSD_BYTE_SWAP -DHAVE_SOCKADDR_SA_LEN
    > -DLIBNET_LIL_ENDIAN
    > > -L/usr/local/lib -L/usr/local/lib/mysql -o snort
    > codes.o debug.o
    > > decode.o log.o mstring.o parser.o plugbase.o
    > snort.o snprintf.o
    > > strlcatu.o strlcpyu.o tag.o ubi_BinTree.o
    > ubi_SplayTree.o util.o
    > > detect.o substr.o trie.o signature.o mempool.o
    > sf_sdlist.o perf.o
    > > perf-flow.o perf-base.o perf-event.o threshold.o
    > > output-plugins/libspo.a
    > detection-plugins/libspd.a
    > > preprocessors/libspp.a -lz -lpcap -lm
    > -lmysqlclient -lnet
    > > plugbase.o: In function `InitPreprocessors':
    > > plugbase.o(.text+0x4a4): undefined reference to
    > `SetupSpade'
    > > *** Error code 1
    > >
    > > Stop in
    > /usr/ports/security/snort/work/snort-1.9.0/src.
    > > *** Error code 1
    > >
    > > Stop in
    > /usr/ports/security/snort/work/snort-1.9.0/src.
    > > *** Error code 1
    > >
    > > Stop in
    > /usr/ports/security/snort/work/snort-1.9.0.
    > > *** Error code 1
    > >
    > > I'm sure there's an easier way to do this, but I
    > don't know enough
    > > FreeBSD tricks yet.
    > >
    > > Thanks!
    > >
    > > Shane
    > >
    > >
    > >
    > >
    >
    -------------------------------------------------------
    > > This SF.net email is sponsored by: Microsoft
    > Visual Studio.NET
    > > comprehensive development tool, built to increase
    > your
    > > productivity. Try a free online hosted session at:
    > >
    >
    http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
    > > _______________________________________________
    > > Snort-users mailing list
    > > Snort-userslists.sourceforge.net
    > > Go to this URL to change user options or
    > unsubscribe:
    > >
    >
    https://lists.sourceforge.net/lists/listinfo/snort-users
    > > Snort-users list archive:
    > >
    >
    http://www.geocrawler.com/redir-sf.php3?list=snort-users
    > >
    >
    >
    > --
    > _______________________________________________
    > Get your free email from http://mymail.operamail.com
    >
    > Powered by Outblaze
    >
    >
    >
    -------------------------------------------------------
    > This SF.net email is sponsored by: Microsoft Visual
    > Studio.NET
    > comprehensive development tool, built to increase
    > your
    > productivity. Try a free online hosted session at:
    >
    http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
    > _______________________________________________
    > Snort-users mailing list
    > Snort-userslists.sourceforge.net
    > Go to this URL to change user options or
    > unsubscribe:
    >
    https://lists.sourceforge.net/lists/listinfo/snort-users
    > Snort-users list archive:
    >
    http://www.geocrawler.com/redir-sf.php3?list=snort-users

    =====
    -----------------------------------------------------------
    If you give a man a fish, he can eat for a day
    If you bludgeon him to death, you can eat the fish yourself
    -----------------------------------------------------------

    __________________________________________________
    Do you Yahoo!?
    Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
    http://mailplus.yahoo.com

    -------------------------------------------------------
    This SF.net email is sponsored by: Microsoft Visual Studio.NET
    comprehensive development tool, built to increase your
    productivity. Try a free online hosted session at:
    http://ads.sourceforge.net/cgi-bin/redirect.pl?micr0003en
    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users