Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Linux » inline mode - 2 libnet libraries problem

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

inline mode - 2 libnet libraries problem


Posted by netsecl on April 15, 2006 07:28:07

I'm having a problem with libnet since I have 2 versions of libnet I installed the 1.0.x version in /usr/snort. I pass these options config:
./configure --prefix=/usr --enable-inline --with-libnet-includes=/usr/snort/include --with-libnet-libraries=/usr/snort/lib

But at the end I get:
/islack/current/snort-2.4.4/src/inline.c:185: undefined reference to `libnet_get_prand'
inline.o(.text+0x16f):/islack/current/snort-2.4.4/src/inline.c:185: undefined reference to `libnet_build_ip'
inline.o(.text+0x192):/islack/current/snort-2.4.4/src/inline.c:188: undefined reference to `libnet_build_tcp'
inline.o(.text+0x1b7):/islack/current/snort-2.4.4/src/inline.c:192: undefined reference to `libnet_get_prand'
inline.o(.text+0x1c9):/islack/current/snort-2.4.4/src/inline.c:192: undefined reference to `libnet_build_ip'
inline.o(.text+0x1f2):/islack/current/snort-2.4.4/src/inline.c:194: undefined reference to `libnet_build_icmp_unreach'
inline.o(.text+0x230):/islack/current/snort-2.4.4/src/inline.c:167: undefined reference to `libnet_get_prand'
inline.o(.text+0x242):/islack/current/snort-2.4.4/src/inline.c:167: undefined reference to `libnet_build_ip'
inline.o(.text+0x265):/islack/current/snort-2.4.4/src/inline.c:170: undefined reference to `libnet_build_tcp'
inline.o(.text+0x28c):/islack/current/snort-2.4.4/src/inline.c:174: undefined reference to `libnet_get_prand'
inline.o(.text+0x29e):/islack/current/snort-2.4.4/src/inline.c:174: undefined reference to `libnet_build_ip'
inline.o(.text+0x2c7):/islack/current/snort-2.4.4/src/inline.c:194: undefined reference to `libnet_build_icmp_unreach'
inline.o(.text+0x2e9):/islack/current/snort-2.4.4/src/inline.c:136: undefined reference to `libnet_open_raw_sock'
inline.o(.text+0x4bd): In function `HandlePacket':
/islack/current/snort-2.4.4/src/inline.c:549: undefined reference to `libnet_open_link_interface'
inline.o(.text+0x4de):/islack/current/snort-2.4.4/src/inline.c:557: undefined reference to `libnet_get_hwaddr'
inline.o(.text+0x548):/islack/current/snort-2.4.4/src/inline.c:694: undefined reference to `libnet_close_link_interface'
inline.o(.text+0x561):/islack/current/snort-2.4.4/src/inline.c:559: undefined reference to `libnet_error'
inline.o(.text+0x628):/islack/current/snort-2.4.4/src/inline.c:470: undefined reference to `libnet_do_checksum'
inline.o(.text+0x646):/islack/current/snort-2.4.4/src/inline.c:478: undefined reference to `libnet_write_ip'
inline.o(.text+0x722):/islack/current/snort-2.4.4/src/inline.c:430: undefined reference to `libnet_do_checksum'
inline.o(.text+0x742):/islack/current/snort-2.4.4/src/inline.c:437: undefined reference to `libnet_write_ip'
inline.o(.text+0x7da):/islack/current/snort-2.4.4/src/inline.c:605: undefined reference to `libnet_do_checksum'
inline.o(.text+0x7f7):/islack/current/snort-2.4.4/src/inline.c:611: undefined reference to `libnet_do_checksum'
inline.o(.text+0x820):/islack/current/snort-2.4.4/src/inline.c:618: undefined reference to `libnet_build_ethernet'
inline.o(.text+0x83f):/islack/current/snort-2.4.4/src/inline.c:625: undefined reference to `libnet_write_link_layer'
inline.o(.text+0x871):/islack/current/snort-2.4.4/src/inline.c:559: undefined reference to `libnet_error'
inline.o(.text+0x90e):/islack/current/snort-2.4.4/src/inline.c:659: undefined reference to `libnet_do_checksum'
inline.o(.text+0x92b):/islack/current/snort-2.4.4/src/inline.c:665: undefined reference to `libnet_do_checksum'
inline.o(.text+0x954):/islack/current/snort-2.4.4/src/inline.c:673: undefined reference to `libnet_build_ethernet'
inline.o(.text+0x972):/islack/current/snort-2.4.4/src/inline.c:683: undefined reference to `libnet_write_link_layer'
collect2: ld returned 1 exit status
make[3]: *** [snort] Error 1
make[3]: Leaving directory `/islack/current/snort-2.4.4/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/islack/current/snort-2.4.4/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/islack/current/snort-2.4.4'
make: *** [all] Error 2

Please help me resolve this problem.

Posted by brevizniak on April 17, 2006 05:19:25

I suspect the build is finding the newer libnet before the 1.0 ones. Make sure /usr/snort/ parts are before the rest of include/libs in the make file and then do a clean build.

Posted by netsecl on April 17, 2006 07:02:51

Ok thanks I'll check this out if it doesn't work I'll try using http://snort-inline.sourceforge.net/download.html

Posted by netsecl on April 17, 2006 08:08:11

The inline from the site I gave you works just fine and is the same thing. If you have problems compiling it directly into snort, use it seperately (divide and rule).
site feedback | Terms of Use | Privacy Policy | forum archives ©2007 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.