From: Christopher B. <bla...@um...> - 2005-01-04 12:22:01
|
the snort.h.patch file will correct the compile error you see below. However, you probably won't be able to pass any packets, because they will fail the IP Header checksum. decode.c.patch will "fix" that. inline.c.patch will prevent it from segfaulting on a "reject" ruleset, because it changes all rejects to drops. It's not pretty, but it's working for me. Best of luck! On Mon, 2005-01-03 at 21:55, Mike Dunigan wrote: > Tried compiling snort_inline-2.2.0a, > snort_inline-2.2.0, and snort_inline-2.2.0-RC1 all on > FreeBSD5.3. > > I'm using ./configure --enable-ipfw and with all 3 > vers of snort-inline it's freezing at the same spot > with the same error: > > Making all in parser > gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I../src > -I../src/sfutil -I../src/output-plugins > -I../src/detection-plugins -I../src/preprocessors > -I../src/preprocessors/flow > -I../src/preprocessors/portscan > -I../src/preprocessors/flow/int-snort > -I../src/preprocessors/HttpInspect/include > -I/usr/local/include -I/usr/local/include -g -O2 > -Wall -DGIDS -DIPFW -DLIBNET_BSDISH_OS > -DLIBNET_BSD_BYTE_SWAP -DHAVE_SOCKADDR_SA_LEN > -DLIBNET_LIL_ENDIAN -c `test -f 'decode.c' || echo > './'`decode.c > decode.c: In function `DecodeIP': > decode.c:2008: error: structure has no member named > `log_bad_checksums' > decode.c: In function `DecodeTCP': > decode.c:2395: error: structure has no member named > `log_bad_checksums' > decode.c: In function `DecodeUDP': > decode.c:2588: error: structure has no member named > `log_bad_checksums' > decode.c: In function `DecodeICMP': > decode.c:2777: error: structure has no member named > `log_bad_checksums' > *** Error code 1 > > Tried checking decode.c at the lines mentioned, but I > don't understand the code well enough to fix > whatever's catching it. Any fixes? > > > > > __________________________________ > Do you Yahoo!? > Jazz up your holiday email with celebrity designs. Learn more. > http://celebrity.mail.yahoo.com > > > ------------------------------------------------------- > The SF.Net email is sponsored by: Beat the post-holiday blues > Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. > It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt > _______________________________________________ > Snort-inline-users mailing list > Sno...@li... > https://lists.sourceforge.net/lists/listinfo/snort-inline-users -- Christopher Black <bla...@um...> |