[Snort-users] Flexresp2 appears broken in 2.8.0.1

permalink · #1 (**permalink**) 01-03-2008

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--===============1646673310==
Content-type: multipart/alternative;
boundary="B_3282195381_2457713"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3282195381_2457713
Content-type: text/plain;
charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

For what it=B9s worth:

gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -I../../src/sfutil
-I/usr/include/pcap -I../../src/output-plugins -I../../src/detection-plugin=
s
-I../../src/dynamic-plugins -I../../src/preprocessors
-I../../src/preprocessors/flow -I../../src/preprocessors/portscan
-I../../src/preprocessors/flow/int-snort
-I../../src/preprocessors/HttpInspect/include
-I../../src/preprocessors/Stream5 -I../../src/target-based
-I/usr/local/mysql/include/mysql -DENABLE_MYSQL -DENABLE_RESPONSE2
-I/usr/include -O2 -mcpu=3Di686 -Wall -DDYNAMIC_PLUGIN -c sp_respond2.c
In file included from ../../src/decode.h:49,
from sp_respond2.c:99:
.../../src/ipv6_port.h:71: error: conflicting types for `ip_t'
/usr/include/dnet/ip.h:411: error: previous declaration of `ip_t'
In file included from sp_respond2.c:99:
.../../src/decode.h:948:1: warning: "IP_PROTO_HOPOPTS" redefined
In file included from /usr/include/dnet.h:15,
from sp_respond2.c:97:
/usr/include/dnet/ip.h:97:1: warning: this is the location of the previous
definition
sp_respond2.c: In function `Respond2Init':
sp_respond2.c:260: warning: assignment from incompatible pointer type
sp_respond2.c: In function `Respond2Restart':
sp_respond2.c:299: warning: passing arg 1 of `ip_close' from incompatible
pointer type
sp_respond2.c:299: warning: assignment from incompatible pointer type
sp_respond2.c: In function `SendReset':
sp_respond2.c:682: warning: passing arg 1 of `ip_send' from incompatible
pointer type
sp_respond2.c: In function `SendUnreach':
sp_respond2.c:806: warning: passing arg 1 of `ip_send' from incompatible
pointer type
make[3]: *** [sp_respond2.o] Error 1
make[3]: Leaving directory `/home/jlay/snort-2.8.0.1/src/detection-plugins'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/home/jlay/snort-2.8.0.1/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/jlay/snort-2.8.0.1'
make: *** [all] Error 2

Configed with:

../configure --enable-flexresp2
--with-mysql-includes=3D/usr/local/mysql/include/mysql
--with-mysql-libraries=3D/usr/local/mysql/lib/mysql

I hit:

http://www.snort.org/docs/snort_htmanuals/htmanual_280/

But I didn=B9t even see flexresp2 as an option. Is it no longer in use?
Thanks all.

James

--B_3282195381_2457713
Content-type: text/html;
charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

<HTML>
<HEAD>
<TITLE>Flexresp2 appears broken in 2.8.0.1</TITLE>
</HEAD>
<BODY>
For w=
hat it’s worth: 
 
gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -I../../src/sfutil =
-I/usr/include/pcap -I../../src/output-plugins -I../../src/detection-plugins=
-I../../src/dynamic-plugins -I../../src/preprocessors -I../../src/preproces=
sors/flow -I../../src/preprocessors/portscan  -I../../src/preprocessors=
/flow/int-snort  -I../../src/preprocessors/HttpInspect/include -I../../=
src/preprocessors/Stream5 -I../../src/target-based  -I/usr/local/mysql/=
include/mysql -DENABLE_MYSQL -DENABLE_RESPONSE2 -I/usr/include  -O2 -mc=
pu=3Di686 -Wall -DDYNAMIC_PLUGIN -c sp_respond2.c 
In file included from ../../src/decode.h:49, 
        &n bsp;   &nb=
sp;    from sp_respond2.c:99: 
.../../src/ipv6_port.h:71: error: conflicting types for `ip_t' 
/usr/include/dnet/ip.h:411: error: previous declaration of `ip_t' 
In file included from sp_respond2.c:99: 
.../../src/decode.h:948:1: warning: "IP_PROTO_HOPOPTS" redefined<B=
R>
In file included from /usr/include/dnet.h:15, 
        &n bsp;   &nb=
sp;    from sp_respond2.c:97: 
/usr/include/dnet/ip.h:97:1: warning: this is the location of the previous =
definition 
sp_respond2.c: In function `Respond2Init': 
sp_respond2.c:260: warning: assignment from incompatible pointer type 
sp_respond2.c: In function `Respond2Restart': 
sp_respond2.c:299: warning: passing arg 1 of `ip_close' from incompatible p=
ointer type 
sp_respond2.c:299: warning: assignment from incompatible pointer type 
sp_respond2.c: In function `SendReset': 
sp_respond2.c:682: warning: passing arg 1 of `ip_send' from incompatible po=
inter type 
sp_respond2.c: In function `SendUnreach': 
sp_respond2.c:806: warning: passing arg 1 of `ip_send' from incompatible po=
inter type 
make[3]: *** [sp_respond2.o] Error 1 
make[3]: Leaving directory `/home/jlay/snort-2.8.0.1/src/detection-plugins'=
 
make[2]: *** [all-recursive] Error 1 
make[2]: Leaving directory `/home/jlay/snort-2.8.0.1/src' 
make[1]: *** [all-recursive] Error 1 
make[1]: Leaving directory `/home/jlay/snort-2.8.0.1' 
make: *** [all] Error 2 
 
Configed with: 
 
../configure --enable-flexresp2 --with-mysql-includes=3D/usr/local/mysql/inclu=
de/mysql --with-mysql-libraries=3D/usr/local/mysql/lib/mysql 
 
I hit: 
 
<a href=3D"http://www.snort.org/docs/snort_htmanuals/htmanual_280/">http://ww=
w.snort.org/docs/snort_htmanuals/htmanual_280/</a> 
 
But I didn’t even see flexresp2 as an option.  Is it no longer i=
n use?  Thanks all. 
 
James
</BODY>
</HTML>

--B_3282195381_2457713--

--===============1646673310==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--===============1646673310==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============1646673310==--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode