Snort mailing list archives

Re: [Snort-users] Issue in DPX installation


From: Makthum Mohamed <makthum () gmail com>
Date: Thu, 9 May 2013 23:53:46 -0700

Hello Hui ,
              Thank you very much for your response and kindly bare me with
me for making this mail a long one.

 I have installed snort on Ubuntu 12.10 running on virtual box following
the instruction given on this link
http://www.snort.org/assets/158/snortinstallguide293.pdf. Snort
installation was successful.

After installing snort i downloaded dpx-1.5 to the directory *
/home/mohamed/snort/dpx-1.5*
 after exploding the tar file when i tried to configure and install DPX  i
got the following error

*mohamed@mohamed-VirtualBox:~/snort/dpx-1.5$ sudo make > make.log
[sudo] password for mohamed:
make[2]: *** No rule to make target `/sf_dynamic_preproc_lib.c', needed by
`sf_dynamic_preproc_lib.c'.  Stop.
make[1]: *** [all-recursive] Error 1
make: *** [all] Error 2
mohamed@mohamed-VirtualBox:~/snort/dpx-1.5$ sudo make
make  all-recursive
make[1]: Entering directory `/home/mohamed/snort/dpx-1.5'
Making all in src
make[2]: Entering directory `/home/mohamed/snort/dpx-1.5/src'
make[2]: *** No rule to make target `/sf_dynamic_preproc_lib.c', needed by
`sf_dynamic_preproc_lib.c'.  Stop.
make[2]: Leaving directory `/home/mohamed/snort/dpx-1.5/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/mohamed/snort/dpx-1.5'
make: *** [all] Error 2*


*Then i edited the build.sh as below*

!/bin/bash

if [ ! -e setup.sh ] ; then
    echo "ERROR: you must echo SNORT=/path/to/snort/dir > setup.sh first"
    exit -1
fi

. setup.sh

export PKG_CONFIG_PATH=$SNORT

libtoolize --automake --copy
aclocal -I m4
autoheader
automake --add-missing --copy
autoconf

*./configure --with-dpx-includes=$SNORT/src/snort_dynamicsrc --prefix=`pwd`
*
# i'm gonna burn in autohell for this ...
echo "#define HAVE_WCHAR_H 1" >> config.h

after this edit i m getting this following error

*mohamed@mohamed-VirtualBox:~/snort/dpx-1.5$ ./build.sh
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:1084: _LT_SYS_MODULE_PATH_AIX is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:1084: _LT_SYS_MODULE_PATH_AIX is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:1084: _LT_SYS_MODULE_PATH_AIX is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:1084: _LT_SYS_MODULE_PATH_AIX is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
configure.ac:11: warning: AC_LANG_CONFTEST: no AC_LANG_SOURCE call detected
in body
../../lib/autoconf/lang.m4:193: AC_LANG_CONFTEST is expanded from...
../../lib/autoconf/general.m4:2661: _AC_LINK_IFELSE is expanded from...
../../lib/autoconf/general.m4:2678: AC_LINK_IFELSE is expanded from...
m4/libtool.m4:4211: _LT_LINKER_SHLIBS is expanded from...
m4/libtool.m4:5343: _LT_LANG_C_CONFIG is expanded from...
m4/libtool.m4:143: _LT_SETUP is expanded from...
m4/libtool.m4:69: LT_INIT is expanded from...
m4/libtool.m4:107: AC_PROG_LIBTOOL is expanded from...
configure.ac:11: the top level
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... no
checking for mawk... mawk
checking whether make sets $(MAKE)... yes
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking for style of include used by make... GNU
checking dependency style of gcc... none
checking build system type... x86_64-unknown-linux-gnu
checking host system type... x86_64-unknown-linux-gnu
checking how to print strings... printf
checking for a sed that does not truncate output... /bin/sed
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for fgrep... /bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for ar... ar
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ok
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... yes
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports shared
libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
Package snort was not found in the pkg-config search path.
Perhaps you should add the directory containing `snort.pc'
to the PKG_CONFIG_PATH environment variable
No package 'snort' found
checking for visibility support... yes
checking for inttypes.h... (cached) yes
checking for memory.h... (cached) yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking for stdint.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for string.h... (cached) yes
checking sys/ioctl.h usability... yes
checking sys/ioctl.h presence... yes
checking for sys/ioctl.h... yes
checking sys/param.h usability... yes
checking sys/param.h presence... yes
checking for sys/param.h... yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking for unistd.h... (cached) yes
checking size of char... 1
checking size of short... 2
checking size of int... 4
checking size of long int... 8
checking size of long long int... 8
checking size of unsigned int... 4
checking size of unsigned long int... 8
checking size of unsigned long long int... 8
checking for u_int8_t... yes
checking for u_int16_t... yes
checking for u_int32_t... yes
checking for u_int64_t... yes
checking for uint8_t... yes
checking for uint16_t... yes
checking for uint32_t... yes
checking for uint64_t... yes
checking for int8_t... yes
checking for int16_t... yes
checking for int32_t... yes
checking for int64_t... yes
checking for boolean... no
checking for stdlib.h... (cached) yes
checking for GNU libc compatible malloc... yes
checking for stdlib.h... (cached) yes
checking for unistd.h... (cached) yes
checking for sys/param.h... (cached) yes
checking for getpagesize... yes
checking for working mmap... yes
checking for gethostbyname... yes
checking for getpagesize... (cached) yes
checking for memset... yes
checking for munmap... yes
checking for socket... yes
checking for strchr... yes
checking for strcspn... yes
checking for strdup... yes
checking for strerror... yes
checking for strrchr... yes
checking for strstr... yes
checking for strtoul... yes
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating test/Makefile
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands
Making clean in test
make[1]: Entering directory `/home/mohamed/snort/dpx-1.5/test'
rm -rf .libs _libs
rm -f *.lo
make[1]: Leaving directory `/home/mohamed/snort/dpx-1.5/test'
Making clean in src
make[1]: Entering directory `/home/mohamed/snort/dpx-1.5/src'
test -z "libdpx.la" || rm -f libdpx.la
rm -f "./so_locations"
rm -rf .libs _libs
rm -f sf_dynamic_preproc_lib.c sfPolicyUserData.c
rm -f *.o
rm -f *.lo
make[1]: Leaving directory `/home/mohamed/snort/dpx-1.5/src'
Making clean in .
make[1]: Entering directory `/home/mohamed/snort/dpx-1.5'
rm -rf .libs _libs
rm -f *.lo
make[1]: Leaving directory `/home/mohamed/snort/dpx-1.5'
make  all-recursive
make[1]: Entering directory `/home/mohamed/snort/dpx-1.5'
Making all in src
make[2]: Entering directory `/home/mohamed/snort/dpx-1.5/src'
cp /usr/local/snort/src/snort_dynamicsrc/sf_dynamic_preproc_lib.c
sf_dynamic_preproc_lib.c
cp /usr/local/snort/src/snort_dynamicsrc/sfPolicyUserData.c
sfPolicyUserData.c
make  all-am
make[3]: Entering directory `/home/mohamed/snort/dpx-1.5/src'
/bin/bash ../libtool --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I.
-I..   -I/usr/local/snort/src/snort_dynamicsrc  -fvisibility=hidden -c -o
dpx.lo dpx.c
../libtool: line 2076: dpx.c: command not found
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I..
-I/usr/local/snort/src/snort_dynamicsrc -fvisibility=hidden -c ""  -fPIC
-DPIC -o .libs/dpx.o
gcc: error: : No such file or directory
gcc: fatal error: no input files
compilation terminated.
make[3]: *** [dpx.lo] Error 1
make[3]: Leaving directory `/home/mohamed/snort/dpx-1.5/src'
make[2]: *** [all] Error 2
make[2]: Leaving directory `/home/mohamed/snort/dpx-1.5/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/mohamed/snort/dpx-1.5'
make: *** [all] Error 2
Making install in src
make[1]: Entering directory `/home/mohamed/snort/dpx-1.5/src'
make  install-am
make[2]: Entering directory `/home/mohamed/snort/dpx-1.5/src'
/bin/bash ../libtool --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I.
-I..   -I/usr/local/snort/src/snort_dynamicsrc  -fvisibility=hidden -c -o
dpx.lo dpx.c
../libtool: line 2076: dpx.c: command not found
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I..
-I/usr/local/snort/src/snort_dynamicsrc -fvisibility=hidden -c ""  -fPIC
-DPIC -o .libs/dpx.o
gcc: error: : No such file or directory
gcc: fatal error: no input files
compilation terminated.
make[2]: *** [dpx.lo] Error 1
make[2]: Leaving directory `/home/mohamed/snort/dpx-1.5/src'
make[1]: *** [install] Error 2
make[1]: Leaving directory `/home/mohamed/snort/dpx-1.5/src'
make: *** [install-recursive] Error 1*



and i see #include "sf_types.h" is already in there in dpx.c

Kindly help with the issue. Thanks in Advance


Regards,
Mohamed Makthum Mohamed Ikbal
Graduate Student
UBC



On Thu, May 9, 2013 at 8:32 AM, Hui Cao <hcao () sourcefire com> wrote:

HI Mohamed,

Can you provide us all the steps you have taken?

Have you done the following?

 1) In the first step (configur snort), please use the command:
./configure --enable-build-dynamic-examples
2) For snort 2.9.4, add the following line to dpx.c file: put #include
"sf_types.h" before #include "snort_debug.h"
see post: http://seclists.org/snort/2013/q1/161

Best,
Hui.


On Thu, May 9, 2013 at 11:18 AM, Joel Esler <jesler () sourcefire com> wrote:

probably a better question for the Snort-devel list.

Moving it over there.

--
*Joel Esler*
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

On May 9, 2013, at 1:36 AM, mohamed makthum <makthum () gmail com> wrote:

 Hello everybody ,
                           I want to write my own preprocessor and I am
trying to install snort dpx 1.5 . I am not able to complete the
installation because of the following error . Please find the details below.

I am running snort 2.9.3.1 version and this is the output of version
command

mohamed@mohamed-Aspire-5749:~/Downloads/dpx-1.5$ snort -V

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.3.1 IPv6 GRE (Build 40)
   ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2012 Sourcefire, Inc., et al.
           Using libpcap version 1.3.0
           Using PCRE version: 8.31 2012-07-06
           Using ZLIB version: 1.2.7

I have installed my snort in /usr/local/snort and I used this command
this command  *echo "SNORT=/usr/local/snort" > setup.sh *as per the
instruction on snort website.

when i execute ./build.sh i am encountering *../libtool: line 2076:
dpx.c: command not found** *error. Please find log attached for complete
info.

I would be grateful and it would help my project if someone could help me
out. Kindly let me if you need more information. Thanks in Advance.


Regards
Mohamed Makthum Mohamed Ikbal
Graduate student
UBC


 <log.txt>
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and
their applications. This 200-page book is written by three acclaimed
leaders in the field. The early access version is available now.
Download your free book today!
http://p.sf.net/sfu/neotech_d2d_may_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!




------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and
their applications. This 200-page book is written by three acclaimed
leaders in the field. The early access version is available now.
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!



------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: