Snort Forums Archive

Archive Home » Linux » Can't make snort-2.4.3 on RedHat 9 (2.4.20-8)

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Can't make snort-2.4.3 on RedHat 9 (2.4.20-8)

Posted by lampard on November 08, 2005 21:05:32

* RedHat 9 (2.4.20-8)
* snort-2.4.3
* libnet-1.0.2a
* mysql-3.23.54a-11
* pcre-6.3

My goal is to log Snort into MySQL and I can successfully configure (./configure --with-mysql --disable-dependency-tracking --enable-linux-smp-stats). However, make fails (just the tail end is captured here).....

Making all in parser
make[3]: Entering directory `/tmp/snort-2.4.3/src/parser'
make[3]: Nothing to be done for `all'.
make[3]: Leaving directory `/tmp/snort-2.4.3/src/parser'
make[3]: Entering directory `/tmp/snort-2.4.3/src'
gcc -g -O2 -Wall -DLINUX_SMP -L/usr/local/lib -lpcre -L/usr/lib -o snort codes.o debug.o decode.o log.o mstring.o parser.o plugbase.o snort.o snprintf.o strlcatu.o strlcpyu.o tag.o ubi_BinTree.o ubi_SplayTree.o util.o detect.o signature.o mempool.o sf_sdlist.o fpcreate.o fpdetect.o pcrm.o byte_extract.o sfthreshold.o packet_time.o event_wrapper.o event_queue.o inline.o output-plugins/libspo.a detection-plugins/libspd.a preprocessors/libspp.a preprocessors/flow/portscan/libportscan.a preprocessors/flow/libflow.a parser/libparser.a preprocessors/HttpInspect/libhttp_inspect.a sfutil/libsfutil.a -lmysqlclient -lz -lpcre -lpcap -lm -lnsl
plugbase.o(.text+0x9b): In function `InitPlugIns':
/tmp/snort-2.4.3/src/plugbase.c:169: undefined reference to `SetupReact'
plugbase.o(.text+0xa0):/tmp/snort-2.4.3/src/plugbase.c:170: undefined reference to `SetupRespond'
collect2: ld returned 1 exit status
make[3]: *** [snort] Error 1
make[3]: Leaving directory `/tmp/snort-2.4.3/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/tmp/snort-2.4.3/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/tmp/snort-2.4.3'
make: *** [all] Error 2

I have tried to configure with ./configure --with-mysql and even ./configure, but this does not have an impact on make. I have performed as many installation steps as I believe possible without actually being able to make and make install. I have /etc/snort and it's files, a startup script, an accessible database... ACID even runs although, of course, there is no data.

I think I'm near the end if I could simply get over this significant hurdle!

Your time and feedback is much appreciated--thanks!

Regards,
JD

Posted by lampard on November 08, 2005 21:08:00

That emoticon, or whatever the hell it's called, was not supposed to appear; my text was interpreted/converted to that. The kernel version is clear in the subject.