Re: QUERY:Building snort statically

["Senthil Prabu.S" <prabu333 () hotpop com>]

Hi,
I am using snort (statically build on my HP-UX machine).
Have also tried on Linux machines.

Steps involved in building Snort statically;

[1]. For time being, move the shared version of snort dependecy
      libraries, such that compiler can only look for static depedency 
      libraries. For ex: this can be done by moving the shared libary,
      /usr/local/lib/libpcre.so to /usr/local/lib/libpcre.so_. Like this do
      for all dependecy products.There is no source code change 
      required to build snort statically. [After completing your snort
     build, dont forget to revoke the changes done to shared libraries].

[2]. If you are building snort with mysql and postgres support, then
      you will face errors as "Unsatisfied symbol". Bez, mysql and
      postgresmysql libraries looks for shared version of SSL libraries,
       by default.
      
      Then, do the following changes in configure script, to fix it,
      File: snort-2.2.3/configure
       
          before: LIBS="${LIBS} -lmysqlclient"
          after: LIBS="${LIBS} -lmysqlclient -lkrb5 -lssl -lcrypto"

      File: snort-2.2.3/configure
       
          before: LIBS="${LIBS} -lpq"
          after: LIBS="${LIBS} -lpq -lkrb5 -lssl -lcrypto".

      Also only when using mysql or postgresql, you will be in need of 
      OpenSSL.

NOTE:
I have build snort-2.3.0 statically with flexresp,mysql,postgresql support.
In this scenario, following are the list of dependecy products.
If you are going to build snort with above options, move the shared libraries
of following;
  MySQL 4.0.21       
  PostgreSQL 7.4.5  
  OpenSSL A.00.09.07 
  Libnet 1.0.2a      
  Pcre 4.4          
  Libpcap 0.8.3   
  Zlib 1.1.4         

P.S: I have not tried snort with inline support.
Hope this helps,if you are in trouble plz write to me.


--
Senthil Prabu.S


If you are smart enough to know that you're not smart enough to be an
Engineer, then you're in Business.
_________________________________________________________________  


> Dear all,
>
> I want to build snort statically. What is the procedure/steps to do
> this? 
> I want to be able to migrate the snort wireless binary t an embedded
> system.
>
> If anyone can help or point me in the right direction that would be
> fantastic.
>
> It will need quite a few libraries as can be seen from the ldd command
> below.
> I am using snort-2.1.1 so I can have snort wireless logging. 
>
> ldd -v src/snort
>        linux-gate.so.1 =>  (0xffffe000)
>        libpcre.so.0 => /usr/local/lib/libpcre.so.0 (0x40029000)
>        libpcap.so.0 => /usr/lib/libpcap.so.0 (0x40036000)
>        libm.so.6 => /lib/tls/libm.so.6 (0x40059000)
>        libnsl.so.1 => /lib/libnsl.so.1 (0x4007b000)
>        libc.so.6 => /lib/tls/libc.so.6 (0x40090000)
>        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
>
>        Version information:
>        src/snort:
>                libc.so.6 (GLIBC_2.1) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.0) => /lib/tls/libc.so.6
>        /usr/local/lib/libpcre.so.0:
>                libc.so.6 (GLIBC_2.1.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.0) => /lib/tls/libc.so.6
>        /usr/lib/libpcap.so.0:
>                libc.so.6 (GLIBC_2.1) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.1.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.0) => /lib/tls/libc.so.6
>        /lib/tls/libm.so.6:
>                ld-linux.so.2 (GLIBC_PRIVATE) => /lib/ld-linux.so.2
>                libc.so.6 (GLIBC_2.1.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.0) => /lib/tls/libc.so.6
>        /lib/libnsl.so.1:
>                libc.so.6 (GLIBC_2.1.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.2) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.2.3) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.0) => /lib/tls/libc.so.6
>                libc.so.6 (GLIBC_2.1) => /lib/tls/libc.so.6
>        /lib/tls/libc.so.6:
>                ld-linux.so.2 (GLIBC_2.1) => /lib/ld-linux.so.2
>                ld-linux.so.2 (GLIBC_2.3) => /lib/ld-linux.so.2
>                ld-linux.so.2 (GLIBC_2.0) => /lib/ld-linux.so.2
>                ld-linux.so.2 (GLIBC_PRIVATE) => /lib/ld-linux.so.2
>
> Regards,
> Will.
>
> William M. Fitzgerald (MSc,BSc),
> Applied Researcher,
> Telecommunications Software & Systems Group,
> Waterford Institute of Technology,
> Cork Rd.
> Waterford.
> Office Ph: +353 51 302937
> Mobile Ph: +353 87 9527083
>
>
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users