From: ChunXin <ch...@os...> - 2007-10-18 06:43:18
|
Dear Will Metcalf; Perfect works ! your svn code work correct ! svn_code without nfnetlink_queue and with nfnetlink_queue appear to have no problem! I will continue to use your svn code ,If there is a problem I will promptly let you know ! :-* Best Regards ChunXin 2007/10/18 Will Metcalf 写道: > it is svn so don't forget to ./autojunk.sh ;-) > > On 10/17/07, ChunXin <ch...@os...> wrote: > >> thanks a lot ! i will try it >> >> Will Metcalf $B<LF;(B: >> >>> I have made some changes to the svn version of snort_inline that >>> should resolve your issue. I also added fixes for a potential DoS >>> issue when the splay tree tree fills up submitted by Marcus Sundberg >>> at Ingate, thanx dude ;-).... You can check out the latest devel >>> version from svn as always with the following command... >>> >>> svn co https://snort-inline.svn.sourceforge.net/svnroot/snort-inline/trunk >>> >>> >>> On 10/16/07, Victor Julien <li...@in...> wrote: >>> >>> >>>> Where did you install the libnetfilter_queue library? If you didn't >>>> install it in /usr please try that... >>>> >>>> Cheers, >>>> Victor >>>> >>>> >>>> ch...@os... wrote: >>>> >>>> >>>>> Yeah , Can you help me ? >>>>> >>>>> >>>>> >>>>> >>>>>> do you even need multiple queue support? >>>>>> >>>>>> On 10/16/07, ch...@os... <ch...@os...> wrote: >>>>>> >>>>>> >>>>>> >>>>>>> I encountered such a problem when i configure snort_inline-2.6.1.5 with >>>>>>> "--enable-nfnetlink" option ,description of the issue as follows: >>>>>>> -------------------------------------- >>>>>>> ....................... >>>>>>> checking linux/netfilter/nfnetlink_queue.h usability... no >>>>>>> checking linux/netfilter/nfnetlink_queue.h presence... yes >>>>>>> configure: WARNING: linux/netfilter/nfnetlink_queue.h: present but >>>>>>> cannot >>>>>>> be compiled >>>>>>> configure: WARNING: linux/netfilter/nfnetlink_queue.h: check for >>>>>>> missing prerequisite headers? >>>>>>> configure: WARNING: linux/netfilter/nfnetlink_queue.h: see the Autoconf >>>>>>> documentation >>>>>>> configure: WARNING: linux/netfilter/nfnetlink_queue.h: section >>>>>>> "Present But Cannot Be Compiled" >>>>>>> configure: WARNING: linux/netfilter/nfnetlink_queue.h: proceeding with >>>>>>> the >>>>>>> preprocessor's result >>>>>>> configure: WARNING: linux/netfilter/nfnetlink_queue.h: in the future, >>>>>>> the >>>>>>> compiler will take precedence >>>>>>> configure: WARNING: ## ------------------------------------------ ## >>>>>>> configure: WARNING: ## Report this to the AC_PACKAGE_NAME lists. ## >>>>>>> configure: WARNING: ## ------------------------------------------ ## >>>>>>> checking for linux/netfilter/nfnetlink_queue.h... yes >>>>>>> checking libnetfilter_queue/libnetfilter_queue.h usability... yes >>>>>>> checking libnetfilter_queue/libnetfilter_queue.h presence... yes >>>>>>> checking for libnetfilter_queue/libnetfilter_queue.h... yes >>>>>>> checking for nfqnl_open in -lnetfilter_queue... no >>>>>>> checking for nfq_set_queue_maxlen in -lnetfilter_queue... no >>>>>>> ................................. >>>>>>> --------------------------------------------------------------------- >>>>>>> I am using libnetfilter_queue-0.0.12 and libnfnetlink-0.0.16 , The >>>>>>> installation process both are "./configure && make && make install" >>>>>>> I do not have to recompile the kernel,because I see that kernel already >>>>>>> support the nfnetfilter_queue feature ( at /boot/config-2.6.20-15 -> >>>>>>> CONFIG_NETFILTER_NETLINK_QUEUE=m) . >>>>>>> >>>>>>> what wrong with my installation? and how can i debug it ? >>>>>>> I think my previous question (Segmentation fault and snort_inline stop >>>>>>> when using namp ) may be related to the issue >>>>>>> >>>>>>> Best Reagrds >>>>>>> >>>>>>> ChunXin >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>> ------------------------------------------------------------------------- >>>> This SF.net email is sponsored by: Splunk Inc. >>>> Still grepping through log files to find problems? Stop. >>>> Now Search log events and configuration files using AJAX and a browser. >>>> Download your FREE copy of Splunk now >> http://get.splunk.com/ >>>> _______________________________________________ >>>> Snort-inline-users mailing list >>>> Sno...@li... >>>> https://lists.sourceforge.net/lists/listinfo/snort-inline-users >>>> >>>> >>>> >>>> >> |