Snort 1.81Beta6 latest build, compile fails

[Neil Dickey <neil () geol niu edu>]

I've been away on an extended vacation and have a mountain of Snort
list posts to catch up with.  Many thanks to those who responded to
my query regarding the accuracy of flags in "original packet" entries
in the logs; I'm digging them out and reading them now.

A few days ago I upgraded to the latest version of Snort, 1.8p1, and
installed it.  Like others, I'm having problems with it dying on me.
It may be dumping core, but I haven't been able to find it.  In a
message posted earlier today it was recommended to try the latest
version of the beta, and I used the link Marty provided to get a copy.

Here's my problem:  When configuring with the --enable-flexresp option,
the configure script generates a makefile with "-I/usr/include" in the
CPPFLAGS string, so I have to go in manually and pull it out before
compiling or the job will fail.  This I do, and get failure at a
different point for a different reason.  Here is the compile output:

make
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c snort.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c log.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c decode.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c mstring.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c rules.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c plugbase.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_pattern_match.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_tcp_flag_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_icmp_type_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_icmp_code_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_ttl_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_ip_id_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_tcp_ack_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_tcp_seq_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_dsize_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c spp_http_decode.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c spp_portscan.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_ipoption_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_rpc_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_icmp_id_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_icmp_seq_check.c
gcc -DHAVE_CONFIG_H -I. -I. -I.   -DBSD_COMP  -g -O2 -Wall -DENABLE_RESPONSE -c sp_respond.c
In file included from sp_respond.c:34:
/usr/include/libnet.h:89: #error "byte order has not been specified, you'll
need to #define either LIBNET_LIL_ENDIAN or LIBNET_BIG_ENDIAN.  See the
documentation regarding the libnet-config script."
make: *** [sp_respond.o] Error 1

The complaint is that "byte order has not been specified," but here is
the relevant line from the screen output of "configure":

  checking whether byte ordering is bigendian... yes

The platform is a Sparc5 running Solaris2.7; the compiler is gcc2.95.2.  If
anyone has any suggestions, I would be most happy to read them.

Best regards,

Neil Dickey, Ph.D.
Research Associate/Sysop
Geology Department
Northern Illinois University
DeKalb, Illinois
60115



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users