[Snort-inline-users] Snort and Snort-inline advice?

[Peters, M. <mp...@on...>]

Both Snort and Snrt-inline have the --enable-inline configuration options. =
Why? Is there a point to Snort-inline since regular Snort seems to have thi=
s? I want to build a combination box that has a bridging pair of Ethernet i=
nterfaces and several Ethernet sensor interfaces. I plan on doing this with=
 Fedora Core.=20

Any advice?=20

One issue I am having is the make process with Snort-inline. Even with a pl=
ain ./configure, I still get the following message:=20

snort.o snprintf.o strlcatu.o strlcpyu.o tag.o ubi_BinTree.o ubi_SplayTree.=
o util.o detect.o signature.o mempool.o sf_sdlist.o fpcreate.o fpdetect.o p=
crm.o byte_extract.o sfthreshold.o inline.o packet_time.o event_wrapper.o e=
vent_queue.o output-plugins/libspo.a detection-plugins/libspd.a preprocesso=
rs/libspp.a preprocessors/flow/portscan/libportscan.a preprocessors/flow/li=
bflow.a parser/libparser.a preprocessors/HttpInspect/libhttp_inspect.a sfut=
il/libsfutil.a -lipq -lpcre -lpcap -lm -lnsl  -lnet=20
inline.o(.text+0x14f): In function `InitInlinePostConfig':=20
/opt/software/snort_inline-2.2.0a/src/inline.c:155: undefined reference to =
`libnet_build_ip'=20
inline.o(.text+0x1a9):/opt/software/snort_inline-2.2.0a/src/inline.c:162: u=
ndefined reference to `libnet_build_ip'=20
inline.o(.text+0x1d2):/opt/software/snort_inline-2.2.0a/src/inline.c:164: u=
ndefined reference to `libnet_build_icmp_unreach'=20
inline.o(.text+0x21d):/opt/software/snort_inline-2.2.0a/src/inline.c:173: u=
ndefined reference to `libnet_build_ip'=20
inline.o(.text+0x274):/opt/software/snort_inline-2.2.0a/src/inline.c:180: u=
ndefined reference to `libnet_build_ip'=20
inline.o(.text+0x2b5):/opt/software/snort_inline-2.2.0a/src/inline.c:124: u=
ndefined reference to `libnet_open_raw_sock'=20
inline.o(.text+0x514): In function `RejectSocket':=20
/opt/software/snort_inline-2.2.0a/src/inline.c:465: undefined reference to =
`libnet_write_ip'=20
inline.o(.text+0x52e):/opt/software/snort_inline-2.2.0a/src/inline.c:467: u=
ndefined reference to `libnet_error'=20
inline.o(.text+0x5bf):/opt/software/snort_inline-2.2.0a/src/inline.c:424: u=
ndefined reference to `libnet_write_ip'=20
inline.o(.text+0x63d): In function `RejectLayer2':=20
/opt/software/snort_inline-2.2.0a/src/inline.c:534: undefined reference to =
`libnet_open_link_interface'=20
inline.o(.text+0x7ac):/opt/software/snort_inline-2.2.0a/src/inline.c:662: u=
ndefined reference to `libnet_write_link_layer'=20
inline.o(.text+0x7c6):/opt/software/snort_inline-2.2.0a/src/inline.c:664: u=
ndefined reference to `libnet_error'=20
inline.o(.text+0x8b9):/opt/software/snort_inline-2.2.0a/src/inline.c:604: u=
ndefined reference to `libnet_write_link_layer'=20
collect2: ld returned 1 exit status=20
make[3]: *** [snort_inline] Error 1=20
make[3]: Leaving directory `/opt/software/snort_inline-2.2.0a/src'=20
make[2]: *** [all-recursive] Error 1=20
make[2]: Leaving directory `/opt/software/snort_inline-2.2.0a/src'=20
make[1]: *** [all-recursive] Error 1=20
make[1]: Leaving directory `/opt/software/snort_inline-2.2.0a'=20
make: *** [all] Error 2=20

Best regards,=20

Michael=20