OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Snort-users] Building snort-inline from CVS

From: Ilo Lorusso (sneak147gmail.com)
Date: Sun Jul 05 2009 - 15:57:04 CDT


thanks for the feed back..

On Sun, Jul 5, 2009 at 10:17 PM, Will Metcalf<william.metcalfgmail.com> wrote:
> I will see if I can find some time to fix in the next couple of days.
> Although I have said it before and I will say it again,  the clamav
> preproc was experimental, and after some experimentation we found that
> really doesn't work that well because clamav is expecting to scan a
> file, not a packet payload with headers/protocol data.  Not only that
> but you have problems with anything bigger than 65k bytes etc.  for
> the clamav preproc to be effective a lot of work would have go into
> writing protocol decoders which neither Victor or I have the cycles
> for.  If you want AV protection in http I suggest that you look at
> HAVP it works quite well.  http://www.server-side.de/
>
> Regards,
>
> Will
>
> On Sun, Jul 5, 2009 at 1:38 PM, Ilo Lorusso<sneak147gmail.com> wrote:
>> Hi
>>
>> I just checkout out the latest code from snort-inline trunk and i want
>> to compile it with clamav support.
>>
>> I run autojunk.sh script then  compile but then get the following error..
>>
>> ../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function
>> 'DynamicDropInline':
>> ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1155: warning:
>> implicit declaration of function 'InlineDrop'
>> ../../../src/dynamic-plugins/sf_dynamic_plugins.c: In function
>> 'InitDynamicPreprocessors':
>> ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error:
>> 'InlineMode' undeclared (first use in this function)
>> ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: (Each
>> undeclared identifier is reported only once
>> ../../../src/dynamic-plugins/sf_dynamic_plugins.c:1243: error: for
>> each function it appears in.)
>> make[4]: *** [sf_dynamic_plugins.o] Error 1
>> make[4]: Leaving directory
>> `/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins'
>> make[3]: *** [all-recursive] Error 1
>> make[3]: Leaving directory
>> `/usr/src/redhat/BUILD/snort-2.8.3/plain/src/dynamic-plugins'
>> make[2]: *** [all-recursive] Error 1
>> make[2]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/plain/src'
>> make[1]: *** [all-recursive] Error 1
>> make[1]: Leaving directory `/usr/src/redhat/BUILD/snort-2.8.3/
>>
>> any idea why? or how to fix..
>>
>> Thanks regards
>>
>> Ilo
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Snort-users mailing list
>> Snort-userslists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users