Re: make problems with Snort 2.9.2 and Ubuntu

[John York <YorkJ () brcc edu>]

I think so, but I'll try it again.  This was a new OS install, and 2.9.2.2 was the first Snort to go on it.  After it 
had problems, I uninstalled it and began trying the older versions.  That was when I found I had the same problem with 
2.9.2.1, but that 2.9.1.2 worked.

-----Original Message-----
From: Joel Esler [mailto:jesler () sourcefire com] 
Sent: Monday, April 02, 2012 5:44 PM
To: John York
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] make problems with Snort 2.9.2 and Ubuntu

Did you run a make uninstall in the 2.9.2.1 directory first?

Just curious.

J

On Apr 2, 2012, at 5:20 PM, John York wrote:

> Hi
>
> The hard drive died on a sensor, so I decided to move up to 2.9.2.2 from 2.9.1.2.  I'm running Ubuntu 11.10 with 
> current patches.  When I try to install 2.9.2.2 or 2.9.2.1, make gives these errors and quits:
>
> dynamic-plugins/libdynamic.a(sf_dynamic_plugins.o): In function `DynamicSendBlockResponseMsg':
> /home/me/snort-2.9.2.2/src/dynamic-plugins/sf_dynamic_plugins.c:1541: undefined reference to `Active_SendData'
> dynamic-plugins/libdynamic.a(sf_dynamic_plugins.o): In function `DynamicActiveSetEnabled':
> /home/me/snort-2.9.2.2/src/dynamic-plugins/sf_dynamic_plugins.c:1434: undefined reference to `Active_SetEnabled'
> collect2: ld returned 1 exit status
> make[3]: *** [snort] Error 1
>
> I tried ./configure --disable-dynamicplugin  but that didn't make a difference.
>
> Strangely, 2.9.1.2 compiles just fine...
>
> I've checked several times to make sure I'm not forgetting dumb things 
> like sudo, and that these modules are all installed:  (even read the 
> last few months of blog.snort.org) libpcap0.8-dev libpcre3-dev
> g++
> bison
> flex
> make
> zlib1g-dev
> daq-0.6.2.tar.gz
> libdnet-1.12.tar.gz
>
> I can "which" all the config files listed in INSTALL
>
> Any ideas?
>
> Thanks
> John
>
> ----------------------------------------------------------------------
> -------- Better than sec? Nothing is better than sec when it comes to 
> monitoring Big Data applications. Try Boundary one-second resolution 
> app monitoring today. Free.
> http://p.sf.net/sfu/Boundary-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!


------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second 
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!