Re: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

["Russ Combs \(rucombs\) via Snort-devel" <snort-devel () lists snort org>]

OK, libdaq was built. Send the contents of:


/home/dorianrosse/snort3_src/snort3-master/walrus/snort_build/config.status

________________________________
From: Dorian ROSSE <dorianbrice () hotmail fr>
Sent: Friday, August 12, 2022 9:25 AM
To: Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Subject: RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

now that work to go more far too the file is in attachment this time thus thanks you in advance to say if you can have 
the attachment,

i wait your smart answer for understand what i need to do now,

thanks you in advance to repair snort3,

Regards.


Dorian ROSSE.
________________________________
De : Russ Combs (rucombs) <rucombs () cisco com>
Envoyé : vendredi 12 août 2022 15:13
À : Dorian ROSSE <dorianbrice () hotmail fr>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : Re: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

Dorian,

You do not need to change the permissions on build_snort.sh. Your original problem is this:

    bash: build_snort.log: Permission non accordée

That's because you previously created porc3/ as root and don't have permission to write in that directory as 
dorianrosse.

Start in your home directory, not ~/porc/ and try again with a different directory:

    sh build_snort.sh walrus &> build_snort.log

Where 'walrus' is something that doesn't exist in your home directory.

The other alternative is to cd; sudo rm -rf porc/ and try again assuming you don't need anything in ~/porc/.

Russ

________________________________
From: Dorian ROSSE <dorianbrice () hotmail fr>
Sent: Friday, August 12, 2022 8:52 AM
To: Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Subject: RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

sorry for the mistake the good line of command chmod is 764 without success for go more far :

'''~/porc/porc3$ sudo chmod 764 build_snort.sh
:~/porc/porc3$ ls -l
total 440
drwxr-xr-x  8 root        root          4096 août  12 13:19 build
-rwxrw-r--  1 dorianrosse dorianrosse    746 août  12 14:36 build_snort.sh
-rw-r--r--  1 root        root        232121 août  10 22:38 ChangeLog
drwxr-xr-x  2 root        root          4096 août  10 22:38 cmake
-rw-r--r--  1 root        root          4957 août  10 22:38 CMakeLists.txt
-rw-r--r--  1 root        root          1034 août  10 22:38 cmake_uninstall.cmake.in
-rw-r--r--  1 root        root          4573 août  10 22:38 config.cmake.h.in
-rw-r--r--  1 root        root           100 août  12 13:13 config.log
-rwxr-xr-x  1 root        root         19895 août  10 22:38 configure_cmake.sh
-rw-r--r--  1 root        root         21011 août  10 22:38 COPYING
-rw-r--r--  1 root        root         70959 août  10 22:38 crusty.cfg
drwxr-xr-x  2 root        root          4096 août  10 22:38 daqs
drwxr-xr-x  6 root        root          4096 août  10 22:38 doc
drwxr-xr-x  2 root        root          4096 août  12 12:48 install
-rw-r--r--  1 root        root         21017 août  10 22:38 LICENSE
drwxr-xr-x  2 root        root          4096 août  10 22:38 lua
-rw-r--r--  1 root        root          6585 août  10 22:38 README.md
-rw-r--r--  1 root        root           915 août  10 22:38 snort.pc.in
drwxr-xr-x 46 root        root          4096 août  10 22:38 src
drwxr-xr-x  5 root        root          4096 août  10 22:38 tools
:~/porc/porc3$ sh build_snort.sh porc3 &> build_snort.log
'''

thanks you in advance for your answer smart,

regards.


Dorian ROSSE.
________________________________
De : Dorian ROSSE <dorianbrice () hotmail fr>
Envoyé : vendredi 12 août 2022 14:49
À : Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

after i have read it right :

it haved rw-rw-r-- thus i have shape right rwxrw-r-- without success for go forward :

'''~/porc/porc3$ sudo chmod 761 build_snort.sh
:~/porc/porc3$ ls -l
total 440
drwxr-xr-x  8 root        root          4096 août  12 13:19 build
-rwxrw---x  1 dorianrosse dorianrosse    746 août  12 14:36 build_snort.sh
-rw-r--r--  1 root        root        232121 août  10 22:38 ChangeLog
drwxr-xr-x  2 root        root          4096 août  10 22:38 cmake
-rw-r--r--  1 root        root          4957 août  10 22:38 CMakeLists.txt
-rw-r--r--  1 root        root          1034 août  10 22:38 cmake_uninstall.cmake.in
-rw-r--r--  1 root        root          4573 août  10 22:38 config.cmake.h.in
-rw-r--r--  1 root        root           100 août  12 13:13 config.log
-rwxr-xr-x  1 root        root         19895 août  10 22:38 configure_cmake.sh
-rw-r--r--  1 root        root         21011 août  10 22:38 COPYING
-rw-r--r--  1 root        root         70959 août  10 22:38 crusty.cfg
drwxr-xr-x  2 root        root          4096 août  10 22:38 daqs
drwxr-xr-x  6 root        root          4096 août  10 22:38 doc
drwxr-xr-x  2 root        root          4096 août  12 12:48 install
-rw-r--r--  1 root        root         21017 août  10 22:38 LICENSE
drwxr-xr-x  2 root        root          4096 août  10 22:38 lua
-rw-r--r--  1 root        root          6585 août  10 22:38 README.md
-rw-r--r--  1 root        root           915 août  10 22:38 snort.pc.in
drwxr-xr-x 46 root        root          4096 août  10 22:38 src
drwxr-xr-x  5 root        root          4096 août  10 22:38 tools
:~/porc/porc3$ sh build_snort.sh porc3 &> build_snort.log
bash: build_snort.log: Permission non accordée
'''

thanks you in advance for your answer smart,

regards.


Dorian ROSSE.
________________________________
De : Dorian ROSSE <dorianbrice () hotmail fr>
Envoyé : vendredi 12 août 2022 14:44
À : Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

russ,


your file is nill thus no line of command works :

''':~/porc/porc3$ sudo mv -f ~/Téléchargements/build_snort.sh .
:~/porc/porc3$ sh build_snort.sh porc3 &> build_snort.log
bash: build_snort.log: Permission non accordée
:~/porc/porc3$ sudo sh build_snort.sh porc3 &> build_snort.log
bash: build_snort.log: Permission non accordée
:~/porc/porc3$ sudo sh build_snort.sh porc3 &> sudo build_snort.log
bash: sudo: Permission non accordée
'''

what i need to do ?

thanks you in advance for your answer smart,

regards.


Dorian ROSSE.
________________________________
De : Russ Combs (rucombs) <rucombs () cisco com>
Envoyé : vendredi 12 août 2022 13:48
À : Dorian ROSSE <dorianbrice () hotmail fr>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : Re: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

Dorian,

What kind of system are you using? Linux / Ubuntu? It seems that you have issues well beyond Snort, so let's do it this 
way. Download the attached file. Then do this command as your normal user dorianrosse. Do not add sudo.

sh build_snort.sh porc3 &> build_snort.log

build_snort.sh is assumed to be in your working directory. porc3 is the name of the directory that build_snort.sh will 
work in. You can change the name but keep it under your home directory.

The script will get and build libdaq and Snort. It requires wget.

Then send build_snort.log.

Russ

________________________________
From: Dorian ROSSE <dorianbrice () hotmail fr>
Sent: Friday, August 12, 2022 6:53 AM
To: Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Subject: RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

russ,


i have success by download the file zip !

because the file doesn't become an attachment i paste what they have inside the file under :

'''configure_cmake.sh : commande introuvable'''

they seems at cisco since you are hacked in the spring of 2022 snort become no take sense,

i have follow your tutorial i was log in root and i have folllow your tutorial :

''':/home/dorianrosse/porc/snort3-master# configure_cmake.sh --prefix=`pwd`/install/ &> config.log
:/home/dorianrosse/porc/snort3-master# mkdir build
:/home/dorianrosse/porc/snort3/home/dorianrosse/porc/snort3-master# cd build/
:/home/dorianrosse/porc/snort3-master/build# configure_cmake.sh --prefix=/home/dorianrosse/porc/snort3-master/install/ 
&> config.log
:/home/dorianrosse/porc/snort3-master/build# cd ..
:/home/dorianrosse/porc/snort3-master# cd install/
:/home/dorianrosse/porc/snort3-master/install# configure_cmake.sh 
--prefix=/home/dorianrosse/porc/snort3-master/install/ &> config.log
:/home/dorianrosse/porc/snort3-master/install# configure_cmake.sh --prefix='pwd' &> config.log
:/home/dorianrosse/porc/snort3-master/install# configure_cmake.sh --prefix='pwd'/install &> config.log
:/home/dorianrosse/porc/snort3-master/install# configure_cmake.sh 
--prefix=/home/dorianrosse/porc/snort3-master/install/install &> config.log
:/home/dorianrosse/porc/snort3-master/install# configure_cmake.sh --prefix=`pwd`/install/ &> config.log
:/home/dorianrosse/porc/snort3-master# configure_cmake.sh --prefix=/home/dorianrosse/porc/snort3-master/install/ &> 
config.log
'''

thanks you in advance to repair snort3,

Regards.


Dorian ROSSE.
________________________________
De : Dorian ROSSE <dorianbrice () hotmail fr>
Envoyé : jeudi 11 août 2022 19:07
À : Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

dear russ,


your turorial doesn't work :

'''~$ cd
~$ mkdir porc
~$ cd porc/
~/porc$ git clone git () github com:snort3/snort3
Clonage dans 'snort3'...
The authenticity of host 'github.com (140.82.121.4)' can't be established.
ED25519 key fingerprint is SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yess
Please type 'yes', 'no' or the fingerprint: yes
Warning: Permanently added 'github.com' (ED25519) to the list of known hosts.
git () github com: Permission denied (publickey).
fatal: Impossible de lire le dépôt distant.

Veuillez vérifier que vous avez les droits d'accès
et que le dépôt existe.
'''

thanks you in advance to repair snort3,

regards.


Dorian ROSSE.

________________________________
De : Russ Combs (rucombs) <rucombs () cisco com>
Envoyé : jeudi 11 août 2022 08:45
À : Dorian ROSSE <dorianbrice () hotmail fr>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : Re: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

Dorian,

There is still a lot going wrong: the trailing \, the empty string thing, configure_options.cmake, unused variables, 
and the wrong --with-*. It looks like your source is not valid at this point.

Instead of trying to work backwards from here, I want to start over and go one step at a time. Please do exactly the 
following. Do not alter the commands.

cd
mkdir porc
cd porc/
git clone git () github com:snort3/snort3.git
snort3/configure_cmake.sh --prefix=`pwd`/install/ &> config.log

Then send me config.log and we can take it from there.

Thanks,
Russ

________________________________
From: Dorian ROSSE <dorianbrice () hotmail fr>
Sent: Wednesday, August 10, 2022 2:03 PM
To: Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Subject: RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

i have set PKG_CONFIG_PATH without success,

before remove hyperscan i have add the subdirectories include dor the including and lib for the libraries without 
success,

thus i have remove hyperscan, libdaq and pcre in the configure by cmake,

i paste below :

'''/home/dorianrosse/snort_src/snort3-3.1.36.0# ./configure_cmake.sh --prefix=/usr/bin/ \
 --with-luajit-libraries=~/snort_src/LuaJIT-2.0.5/ \
 --with-luajit-includes=~/snort_src/LuaJIT-2.0.5/ \
 --enable-jemalloc --with-openssl=~/snort_src/openssl-1.1.1q/include/ \
 --with-hyperscan-includes=~/snort_src/hyperscan-5.4.0/include/ \
 --with-dnet-libraries=~/snort_src/libdnet-1.11/include/ \
 --with-dnet-includes=~/snort_src/libdnet-1.11/include/ \
 --with-iconv-libraries=~/snort_src/libiconv-1.17/lib/ \
 --with-iconv-includes=~/snort_src/libiconv-1.17/include/ \
 --with-pcap-libraries=~/snort_src/libpcap-1.10.1/ \
 --with-pcap-includes=~/snort_src/libpcap-1.10.1/ \
 --with-uuid-libraries=~/snort_src/uuid/ \
 --with-uuid-includes=~/snort_src/uuid/ \
Build Directory : build
Source Directory: /home/dorianrosse/snort_src/snort3-3.1.36.0
CMake Warning:
  Ignoring empty string ("") provided on the command line.


-- The CXX compiler identification is GNU 11.2.0
-- The C compiler identification is GNU 11.2.0
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Check for working CXX compiler: /usr/bin/c++ - skipped
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Success
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.2")
-- Checking for module 'libdaq>=3.0.7'
--   Found libdaq, version 3.0.9
-- Found DAQ: /usr/local/lib/libdaq.so
-- Checking for module 'libdaq_static_afpacket'
--   Found libdaq_static_afpacket, version 3.0.9
-- Checking for module 'libdaq_static_bpf'
--   Found libdaq_static_bpf, version 3.0.9
-- Checking for module 'libdaq_static_dump'
--   Found libdaq_static_dump, version 3.0.9
-- Checking for module 'libdaq_static_fst'
--   Found libdaq_static_fst, version 3.0.9
-- Checking for module 'libdaq_static_gwlb'
--   Found libdaq_static_gwlb, version 3.0.9
-- Checking for module 'libdaq_static_nfq'
--   Found libdaq_static_nfq, version 3.0.9
-- Checking for module 'libdaq_static_pcap'
--   Found libdaq_static_pcap, version 3.0.9
-- Checking for module 'libdaq_static_savefile'
--   Found libdaq_static_savefile, version 3.0.9
-- Checking for module 'libdaq_static_trace'
--   Found libdaq_static_trace, version 3.0.9
-- Found DNET: /usr/include
-- Found FLEX: /usr/bin/flex (found suitable version "2.6.4", minimum required is "2.6.0")
-- Checking for module 'hwloc'
--   Found hwloc, version 2.7.0
-- Found HWLOC: /usr/lib/x86_64-linux-gnu/libhwloc.so
-- Checking for module 'luajit'
--   Found luajit, version 2.0.5
-- Found LuaJIT: /usr/local/lib/libluajit-5.1.so (found version "2.0.5")
-- Found OpenSSL: /usr/local/lib/libcrypto.so (found suitable version "1.1.1q", minimum required is "1.1.1")
-- Found PCAP: /usr/local/lib/libpcap.so
-- Performing Test PCAP_LINKS_SOLO
-- Performing Test PCAP_LINKS_SOLO - Success
-- Checking for module 'libpcre'
--   Found libpcre, version 8.45
-- Found PCRE: /usr/local/include
-- Found ZLIB: /usr/lib/x86_64-linux-gnu/libz.so (found version "1.2.11")
-- Checking for module 'libhs'
--   No package 'libhs' found
-- Checking for module 'libsafec'
--   Found libsafec, version 3.7.2
-- Checking for module 'uuid'
--   Found uuid, version 2.37.2
-- Checking for module 'libunwind'
--   Found libunwind, version 1.3.2
-- Found Libunwind: /usr/lib/x86_64-linux-gnu/libunwind.so (found version "1.3.2")
-- Performing Test HAS_C_HIDDEN
-- Performing Test HAS_C_HIDDEN - Success
-- Performing Test HAS_CXX_HIDDEN
-- Performing Test HAS_CXX_HIDDEN - Success
CMake Warning (dev) in cmake/configure_options.cmake:
  A logical block opening on the line

    /home/dorianrosse/snort_src/snort3-3.1.36.0/cmake/configure_options.cmake:177 (if)

  closes on the line

    /home/dorianrosse/snort_src/snort3-3.1.36.0/cmake/configure_options.cmake:185 (endif)

  with mis-matching arguments.
Call Stack (most recent call first):
  CMakeLists.txt:29 (include)
This warning is for project developers.  Use -Wno-dev to suppress it.

-- Looking for malloc_trim
-- Looking for malloc_trim - found
-- Looking for memrchr
-- Looking for memrchr - found
-- Looking for sigaction
-- Looking for sigaction - found
-- Looking for basename_r
-- Looking for basename_r - not found
-- Performing Test HAVE_GNU_STRERROR_R
-- Performing Test HAVE_GNU_STRERROR_R - Success
-- Looking for getrpcent
-- Looking for getrpcent - found
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of long int
-- Check size of long int - done
-- Check size of unsigned long int
-- Check size of unsigned long int - done
-- Performing Test INLINE
-- Performing Test INLINE - Success
-- Performing Test RESTRICT
-- Performing Test RESTRICT - Success
-- Looking for lzma_code in /usr/lib/x86_64-linux-gnu/liblzma.so
-- Looking for lzma_code in /usr/lib/x86_64-linux-gnu/liblzma.so - found
-- Looking for backtrace in /usr/lib/x86_64-linux-gnu/libunwind.so
-- Looking for backtrace in /usr/lib/x86_64-linux-gnu/libunwind.so - found
-- Looking for printf_s in /usr/local/lib/libsafec.so
-- Looking for printf_s in /usr/local/lib/libsafec.so - found
-- Looking for uuid_parse in /usr/lib/x86_64-linux-gnu/libuuid.so
-- Looking for uuid_parse in /usr/lib/x86_64-linux-gnu/libuuid.so - found

-------------------------------------------------------
snort version 3.1.36.0

Install options:
    prefix:     /usr/bin
    includes:   /usr/bin/include/snort
    plugins:    /usr/bin/lib/snort

Compiler options:
    CC:             /usr/bin/cc
    CXX:            /usr/bin/c++
    CFLAGS:            -fvisibility=hidden   -DNDEBUG -g -ggdb     -O2 -g -DNDEBUG
    CXXFLAGS:          -fvisibility=hidden   -DNDEBUG -g -ggdb    -O2 -g -DNDEBUG
    EXE_LDFLAGS:
    MODULE_LDFLAGS:

Feature options:
    DAQ Modules:    Static (afpacket;bpf;dump;fst;gwlb;nfq;pcap;savefile;trace)
    libatomic:      System-provided
    Hyperscan:      OFF
    ICONV:          ON
    Libunwind:      ON
    LZMA:           ON
    RPC DB:         Built-in
    SafeC:          ON
    TCMalloc:       OFF
    JEMalloc:       OFF
    UUID:           ON
-------------------------------------------------------

-- Configuring done
-- Generating done
CMake Warning:
  Manually-specified variables were not used by the project:

    ENABLE_JEMALLOC
    STATIC_JEMALLOC


-- Build files have been written to: /home/dorianrosse/snort_src/snort3-3.1.36.0/build



'''

____________________________________________________________________________

'''/home/dorianrosse/snort_src/snort3-3.1.36.0/build# make VERBOSE=1
/usr/local/bin/cmake -S/home/dorianrosse/snort_src/snort3-3.1.36.0 -B/home/dorianrosse/snort_src/snort3-3.1.36.0/build 
--check-build-system CMakeFiles/Makefile.cmake 0
/usr/local/bin/cmake -E cmake_progress_start /home/dorianrosse/snort_src/snort3-3.1.36.0/build/CMakeFiles 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build//CMakeFiles/progress.marks
make  -f CMakeFiles/Makefile2 all
make[1] : on entre dans le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make  -f src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/build.make 
src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/depend
make[2] : on entre dans le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
cd /home/dorianrosse/snort_src/snort3-3.1.36.0/build && /usr/local/bin/cmake -E cmake_depends "Unix Makefiles" 
/home/dorianrosse/snort_src/snort3-3.1.36.0 /home/dorianrosse/snort_src/snort3-3.1.36.0/src/connectors/tcp_connector 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/DependInfo.cmake
 --color=
Dependencies file "src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector.cc.o.d" is newer than 
depends file 
"/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/compiler_depend.internal".
Dependencies file "src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector_module.cc.o.d" is newer than 
depends file 
"/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/compiler_depend.internal".
Consolidate compiler generated dependencies of target tcp_connector
make[2] : on quitte le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make  -f src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/build.make 
src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/build
make[2] : on entre dans le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
[  0%] Building CXX object src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector.cc.o
cd /home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector && /usr/bin/c++ -DHAVE_CONFIG_H 
-Dinline=inline -Drestrict=__restrict -I/home/dorianrosse/snort_src/snort3-3.1.36.0/src/network_inspectors 
-I/home/dorianrosse/snort_src/snort3-3.1.36.0/src -I/usr/local/include/luajit-2.0 
-I/home/dorianrosse/snort_src/hyperscan-5.4.0 -I/home/dorianrosse/snort_src/snort3-3.1.36.0/build 
-I/home/dorianrosse/snort_src/snort3-3.1.36.0 -I/usr/local/include/safeclib -I/usr/include/uuid -fvisibility=hidden   
-DNDEBUG -g -ggdb    -O2 -g -DNDEBUG -std=c++14 -MD -MT 
src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector.cc.o -MF 
CMakeFiles/tcp_connector.dir/tcp_connector.cc.o.d -o CMakeFiles/tcp_connector.dir/tcp_connector.cc.o -c 
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/connectors/tcp_connector/tcp_connector.cc
In file included from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/framework/connector.h:29,
                 from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/connectors/tcp_connector/tcp_connector.h:26,
                 from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/connectors/tcp_connector/tcp_connector.cc:25:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/framework/base_api.h:36:10: fatal error: framework/api_options.h: Aucun 
fichier ou dossier de ce type
   36 | #include "framework/api_options.h"
      |          ^~~~~~~~~~~~~~~~~~~~~~~~~
compilation terminated.
make[2]: *** [src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/build.make:76 : 
src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector.cc.o] Erreur 1
make[2] : on quitte le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make[1]: *** [CMakeFiles/Makefile2:5100 : src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/all] Erreur 2
make[1] : on quitte le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make: *** [Makefile:156 : all] Erreur 2
'''

________________________________________________________________________________

thanks you in advance to repair snort3,

Regards.


Dorian ROSSE.
________________________________
De : Russ Combs (rucombs) <rucombs () cisco com>
Envoyé : mercredi 10 août 2022 17:42
À : Dorian ROSSE <dorianbrice () hotmail fr>; snort-devel () lists snort org <snort-devel () lists snort org>
Objet : Re: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

Dorian,

There is a lot going on here:

1. You need to remove sudo from your configure_cmake.sh command line. That is not needed, and it causes issues because 
you get a different environment. It also caused your make to fail because of permissions.

2. Many of the paths configured with --with-* options are incorrect. You may need to add include/ and/or lib/ to some 
of those paths.

* It found /usr/local/lib/libdaq.so but ~/snort_src/libdaq-3.0.9/ was specified.
* Hyperscan paths were specified but hyperscan was not found.
* ~/snort_src/pcre-8.45/  was specified but it found pcre in /usr/local/.

3. --enable-jemalloc was specified but it could not find jemalloc. You will need to install jemalloc and set 
PKG_CONFIG_PATH if it is not installed in /usr/local/.

To minimize the issues, start over. Do not specify sudo anywhere. And do not specify --with-* unless you get an error 
or it finds the wrong one. Send the updated results.

Russ

________________________________
From: Dorian ROSSE <dorianbrice () hotmail fr>
Sent: Wednesday, August 10, 2022 4:01 AM
To: Russ Combs (rucombs) <rucombs () cisco com>; snort-devel () lists snort org <snort-devel () lists snort org>
Subject: RE: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

no answer also i paste the answer of the line of command :

'''~/snort_src/snort3-3.1.36.0$ sudo ./configure_cmake.sh --prefix=/usr/bin/ \
 --with-luajit-libraries=~/snort_src/LuaJIT-2.0.5/ \
 --with-luajit-includes=~/snort_src/LuaJIT-2.0.5/ \
 --enable-jemalloc --with-openssl=~/snort_src/openssl-1.1.1q/ \
 --with-daq-includes=~/snort_src/libdaq-3.0.9/include \
 --with-daq-libraries=~/snort_src/libdaq-3.0.9/ \
 --with-hyperscan-includes=~/snort_src/hyperscan-5.4.0 \
 --with-hyperscan-libraries=~/snort_src/hyperscan-5.4.0 \
 --with-pcre-libraries=~/snort_src/pcre-8.45/ \
 --with-pcre-includes=~/snort_src/pcre-8.45/ \
 --with-dnet-libraries=~/snort_src/libdnet-1.11/ \
 --with-dnet-includes=~/snort_src/libdnet-1.11/ \
 --with-iconv-libraries=~/snort_src/libiconv-1.17/ \
 --with-iconv-includes=~/snort_src/libiconv-1.17/ \
 --with-pcap-libraries=~/snort_src/libpcap-1.10.1/ \
 --with-pcap-includes=~/snort_src/libpcap-1.10.1/ \
 --with-uuid-libraries=~/snort_src/uuid/ \
 --with-uuid-includes=~/snort_src/uuid/ \
Build Directory : build
Source Directory: /home/dorianrosse/snort_src/snort3-3.1.36.0
CMake Warning:
  Ignoring empty string ("") provided on the command line.


-- The CXX compiler identification is GNU 11.2.0
-- The C compiler identification is GNU 11.2.0
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Check for working CXX compiler: /usr/bin/c++ - skipped
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Success
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.2")
-- Checking for module 'libdaq>=3.0.7'
--   Found libdaq, version 3.0.9
-- Found DAQ: /usr/local/lib/libdaq.so
-- Checking for module 'libdaq_static_afpacket'
--   Found libdaq_static_afpacket, version 3.0.9
-- Checking for module 'libdaq_static_bpf'
--   Found libdaq_static_bpf, version 3.0.9
-- Checking for module 'libdaq_static_dump'
--   Found libdaq_static_dump, version 3.0.9
-- Checking for module 'libdaq_static_fst'
--   Found libdaq_static_fst, version 3.0.9
-- Checking for module 'libdaq_static_gwlb'
--   Found libdaq_static_gwlb, version 3.0.9
-- Checking for module 'libdaq_static_nfq'
--   Found libdaq_static_nfq, version 3.0.9
-- Checking for module 'libdaq_static_pcap'
--   Found libdaq_static_pcap, version 3.0.9
-- Checking for module 'libdaq_static_savefile'
--   Found libdaq_static_savefile, version 3.0.9
-- Checking for module 'libdaq_static_trace'
--   Found libdaq_static_trace, version 3.0.9
-- Found DNET: /usr/include
-- Found FLEX: /usr/bin/flex (found suitable version "2.6.4", minimum required is "2.6.0")
-- Checking for module 'hwloc'
--   Found hwloc, version 2.7.0
-- Found HWLOC: /usr/lib/x86_64-linux-gnu/libhwloc.so
-- Checking for module 'luajit'
--   Found luajit, version 2.0.5
-- Found LuaJIT: /usr/local/lib/libluajit-5.1.so (found version "2.0.5")
-- Found OpenSSL: /usr/local/lib/libcrypto.so (found suitable version "1.1.1q", minimum required is "1.1.1")
-- Found PCAP: /usr/local/lib/libpcap.so
-- Performing Test PCAP_LINKS_SOLO
-- Performing Test PCAP_LINKS_SOLO - Success
-- Checking for module 'libpcre'
--   Found libpcre, version 8.45
-- Found PCRE: /usr/local/include
-- Found ZLIB: /usr/lib/x86_64-linux-gnu/libz.so (found version "1.2.11")
-- Checking for module 'libhs'
--   No package 'libhs' found
-- Checking for module 'libsafec'
--   Found libsafec, version 3.7.2
-- Checking for module 'uuid'
--   Found uuid, version 2.37.2
-- Checking for module 'libunwind'
--   Found libunwind, version 1.3.2
-- Found Libunwind: /usr/lib/x86_64-linux-gnu/libunwind.so (found version "1.3.2")
-- Performing Test HAS_C_HIDDEN
-- Performing Test HAS_C_HIDDEN - Success
-- Performing Test HAS_CXX_HIDDEN
-- Performing Test HAS_CXX_HIDDEN - Success
CMake Warning (dev) in cmake/configure_options.cmake:
  A logical block opening on the line

    /home/dorianrosse/snort_src/snort3-3.1.36.0/cmake/configure_options.cmake:177 (if)

  closes on the line

    /home/dorianrosse/snort_src/snort3-3.1.36.0/cmake/configure_options.cmake:184 (endif)

  with mis-matching arguments.
Call Stack (most recent call first):
  CMakeLists.txt:29 (include)
This warning is for project developers.  Use -Wno-dev to suppress it.

-- Looking for malloc_trim
-- Looking for malloc_trim - found
-- Looking for memrchr
-- Looking for memrchr - found
-- Looking for sigaction
-- Looking for sigaction - found
-- Looking for basename_r
-- Looking for basename_r - not found
-- Performing Test HAVE_GNU_STRERROR_R
-- Performing Test HAVE_GNU_STRERROR_R - Success
-- Looking for getrpcent
-- Looking for getrpcent - found
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of long int
-- Check size of long int - done
-- Check size of unsigned long int
-- Check size of unsigned long int - done
-- Performing Test INLINE
-- Performing Test INLINE - Success
-- Performing Test RESTRICT
-- Performing Test RESTRICT - Success
-- Looking for lzma_code in /usr/lib/x86_64-linux-gnu/liblzma.so
-- Looking for lzma_code in /usr/lib/x86_64-linux-gnu/liblzma.so - found
-- Looking for backtrace in /usr/lib/x86_64-linux-gnu/libunwind.so
-- Looking for backtrace in /usr/lib/x86_64-linux-gnu/libunwind.so - found
-- Looking for printf_s in /usr/local/lib/libsafec.so
-- Looking for printf_s in /usr/local/lib/libsafec.so - found
-- Looking for uuid_parse in /usr/lib/x86_64-linux-gnu/libuuid.so
-- Looking for uuid_parse in /usr/lib/x86_64-linux-gnu/libuuid.so - found

-------------------------------------------------------
snort version 3.1.36.0

Install options:
    prefix:     /usr/bin
    includes:   /usr/bin/include/snort
    plugins:    /usr/bin/lib/snort

Compiler options:
    CC:             /usr/bin/cc
    CXX:            /usr/bin/c++
    CFLAGS:            -fvisibility=hidden   -DNDEBUG -g -ggdb    -O2 -g -DNDEBUG
    CXXFLAGS:          -fvisibility=hidden   -DNDEBUG -g -ggdb    -O2 -g -DNDEBUG
    EXE_LDFLAGS:
    MODULE_LDFLAGS:

Feature options:
    DAQ Modules:    Static (afpacket;bpf;dump;fst;gwlb;nfq;pcap;savefile;trace)
    libatomic:      System-provided
    Hyperscan:      OFF
    ICONV:          ON
    Libunwind:      ON
    LZMA:           ON
    RPC DB:         Built-in
    SafeC:          ON
    TCMalloc:       OFF
    JEMalloc:       OFF
    UUID:           ON
-------------------------------------------------------

-- Configuring done
-- Generating done
CMake Warning:
  Manually-specified variables were not used by the project:

    ENABLE_JEMALLOC
    STATIC_JEMALLOC


-- Build files have been written to: /home/dorianrosse/snort_src/snort3-3.1.36.0/build
'''

____________________________________________________________________________________

'''~/snort_src/snort3-3.1.36.0/build$ make VERBOSE=1
/usr/local/bin/cmake -S/home/dorianrosse/snort_src/snort3-3.1.36.0 -B/home/dorianrosse/snort_src/snort3-3.1.36.0/build 
--check-build-system CMakeFiles/Makefile.cmake 0
/usr/local/bin/cmake -E cmake_progress_start /home/dorianrosse/snort_src/snort3-3.1.36.0/build/CMakeFiles 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build//CMakeFiles/progress.marks
make  -f CMakeFiles/Makefile2 all
make[1] : on entre dans le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make  -f src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/build.make 
src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/depend
make[2] : on entre dans le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
cd /home/dorianrosse/snort_src/snort3-3.1.36.0/build && /usr/local/bin/cmake -E cmake_depends "Unix Makefiles" 
/home/dorianrosse/snort_src/snort3-3.1.36.0 /home/dorianrosse/snort_src/snort3-3.1.36.0/src/connectors/tcp_connector 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/DependInfo.cmake
 --color=
Dependencies file "src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector.cc.o.d" is newer than 
depends file 
"/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/compiler_depend.internal".
Dependencies file "src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/tcp_connector_module.cc.o.d" is newer than 
depends file 
"/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/compiler_depend.internal".
Consolidate compiler generated dependencies of target tcp_connector
CMake Error: Cannot open file for write: 
/home/dorianrosse/snort_src/snort3-3.1.36.0/build/src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/compiler_depend.make.tmpa51fe
CMake Error: : System Error: Permission denied
make[2]: *** [src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/build.make:114 : 
src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/depend] Erreur 2
make[2] : on quitte le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make[1]: *** [CMakeFiles/Makefile2:5099 : src/connectors/tcp_connector/CMakeFiles/tcp_connector.dir/all] Erreur 2
make[1] : on quitte le répertoire « /home/dorianrosse/snort_src/snort3-3.1.36.0/build »
make: *** [Makefile:156 : all] Erreur 2
dorianrosse@Ubuntu-ThinkPad-X250:~/snort_src/snort3-3.1.36.0/b
'''

___________________________________________________________________________________________________________________

thanks you in advance to repair snort3,

regards.


Dorian ROSSE.
________________________________
De : Russ Combs (rucombs) <rucombs () cisco com>
Envoyé : mardi 9 août 2022 01:57
À : snort-devel () lists snort org <snort-devel () lists snort org>; Dorian ROSSE <dorianbrice () hotmail fr>
Objet : Re: snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort

Dorian,

If you are just starting out, I suggest focusing on Snort 3. That will cut your problems in half. 😉

You most likely need to add include/ to your daq-includes like this: 
--with-daq-includes=~/snort_src/libdaq-3.0.9/include. It is probably finding includes for the wrong version.

Also, you should configure for either tcmalloc or jemalloc, not both. jemalloc is required for memory management and is 
highly recommended.

Make the above changes and send cmake.out and make.out for further assistance with Snort 3.

$ configure_cmake.sh <args> &> cmake.out
$ cd build/
$ make VERBOSE=1 &> make.out

Thanks
Russ

________________________________
From: Snort-devel <snort-devel-bounces () lists snort org> on behalf of Dorian ROSSE via Snort-devel <snort-devel () 
lists snort org>
Sent: Sunday, August 7, 2022 9:11 AM
To: snort-devel () lists snort org <snort-devel () lists snort org>
Subject: [Snort-devel] snort3 can't build fully thus i think remove my subscribing of snort because i can't build both 
snort

hello,


snort3 can't build fully thus i think remove my subscribing of snort because i can't build both snort,

the error happening when i launch line of command following :

'''sudo ./configure_cmake.sh --prefix=/usr/bin/  --with-luajit-libraries=~/snort_src/LuaJIT-2.0.5/  
--with-luajit-includes=~/snort_src/LuaJIT-2.0.5/  --enable-tcmalloc --enable-jemalloc 
--with-openssl=~/snort_src/openssl-1.1.1q/  --with-daq-includes=~/snort_src/libdaq-3.0.9/  
--with-daq-libraries=~/snort_src/libdaq-3.0.9/  --with-hyperscan-includes=~/snort_src/hyperscan-5.4.0  
--with-hyperscan-libraries=~/snort_src/hyperscan-5.4.0  --with-pcre-libraries=~/snort_src/pcre-8.45/  
--with-pcre-includes=~/snort_src/pcre-8.45/  --with-dnet-libraries=~/snort_src/libdnet-1.11/  
--with-dnet-includes=~/snort_src/libdnet-1.11/  --with-iconv-libraries=~/snort_src/libiconv-1.17/  
--with-iconv-includes=~/snort_src/libiconv-1.17/  --with-pcap-libraries=~/snort_src/libpcap-1.10.1/  
--with-pcap-includes=~/snort_src/libpcap-1.10.1/  --with-uuid-libraries=~/snort_src/uuid/  
--with-uuid-includes=~/snort_src/uuid/  && cd build && sudo make -j 4 && sudo make -j 4 install

'''

'''-- Build files have been written to: /home/dorianrosse/snort_src/snort3-3.1.36.0/build
Consolidate compiler generated dependencies of target tcp_connector
Consolidate compiler generated dependencies of target codecs
Consolidate compiler generated dependencies of target root_codecs
Consolidate compiler generated dependencies of target ips_actions
[  1%] Built target tcp_connector
[  1%] Building CXX object src/codecs/root/CMakeFiles/root_codecs.dir/cd_eth.cc.o
[  1%] Built target codecs
Consolidate compiler generated dependencies of target link_codecs
Consolidate compiler generated dependencies of target ip_codecs
[  1%] Building CXX object src/actions/CMakeFiles/ips_actions.dir/act_alert.cc.o
[  1%] Building CXX object src/codecs/link/CMakeFiles/link_codecs.dir/cd_vlan.cc.o
[  1%] Building CXX object src/codecs/ip/CMakeFiles/ip_codecs.dir/cd_ipv4.cc.o
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/link/cd_vlan.cc: In member function ‘virtual bool 
{anonymous}::VlanCodec::decode(const snort::RawData&, snort::CodecData&, DecodeData&)’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/link/cd_vlan.cc:99:32: error: ‘daq_msg_get_pkthdr’ was not 
declared in this scope
   99 |     const DAQ_PktHdr_t* pkth = daq_msg_get_pkthdr(raw.daq_msg);
      |                                ^~~~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/link/cd_vlan.cc:100:23: error: ‘DAQ_PKT_FLAG_IGNORE_VLAN’ was 
not declared in this scope
  100 |     if (pkth->flags & DAQ_PKT_FLAG_IGNORE_VLAN)
      |                       ^~~~~~~~~~~~~~~~~~~~~~~~
make[2]: *** [src/codecs/link/CMakeFiles/link_codecs.dir/build.make:202 : 
src/codecs/link/CMakeFiles/link_codecs.dir/cd_vlan.cc.o] Erreur 1
make[1]: *** [CMakeFiles/Makefile2:2812 : src/codecs/link/CMakeFiles/link_codecs.dir/all] Erreur 2
make[1]: *** Attente des tâches non terminées....
[  1%] Building CXX object src/actions/CMakeFiles/ips_actions.dir/act_block.cc.o
In file included from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet_manager.h:31,
                 from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/root/cd_eth.cc:32:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h:146:5: error: ‘DAQ_Msg_h’ does not name a type
  146 |     DAQ_Msg_h daq_msg;              // DAQ message this packet came from
      |     ^~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h: In member function ‘bool 
snort::Packet::is_inter_group_flow() const’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h:337:29: error: ‘DAQ_PKT_FLAG_SIGNIFICANT_GROUPS’ was 
not declared in this scope
  337 |     { return (pkth->flags & DAQ_PKT_FLAG_SIGNIFICANT_GROUPS) != 0; }
      |                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/actions/act_alert.cc:26:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h:146:5: error: ‘DAQ_Msg_h’ does not name a type
  146 |     DAQ_Msg_h daq_msg;              // DAQ message this packet came from
      |     ^~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h: In member function ‘bool 
snort::Packet::is_inter_group_flow() const’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h:337:29: error: ‘DAQ_PKT_FLAG_SIGNIFICANT_GROUPS’ was 
not declared in this scope
  337 |     { return (pkth->flags & DAQ_PKT_FLAG_SIGNIFICANT_GROUPS) != 0; }
      |                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
make[2]: *** [src/actions/CMakeFiles/ips_actions.dir/build.make:104 : 
src/actions/CMakeFiles/ips_actions.dir/act_alert.cc.o] Erreur 1
make[2]: *** Attente des tâches non terminées....
[  1%] Building CXX object src/codecs/ip/CMakeFiles/ip_codecs.dir/cd_tcp.cc.o
make[2]: *** [src/codecs/root/CMakeFiles/root_codecs.dir/build.make:76 : 
src/codecs/root/CMakeFiles/root_codecs.dir/cd_eth.cc.o] Erreur 1
make[1]: *** [CMakeFiles/Makefile2:2786 : src/codecs/root/CMakeFiles/root_codecs.dir/all] Erreur 2
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc: In member function ‘bool 
{anonymous}::Ipv4Codec::valid_checksum_from_daq(const snort::RawData&)’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:135:11: error: ‘DAQ_PktDecodeData_t’ does not name 
a type
  135 |     const DAQ_PktDecodeData_t* pdd =
      |           ^~~~~~~~~~~~~~~~~~~
[  1%] Building CXX object src/codecs/ip/CMakeFiles/ip_codecs.dir/cd_auth.cc.o
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:137:10: error: ‘pdd’ was not declared in this scope
  137 |     if (!pdd || !pdd->flags.bits.l3_checksum || !pdd->flags.bits.ipv4 || !pdd->flags.bits.l3)
      |          ^~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:140:9: error: ‘pdd’ was not declared in this scope
  140 |     if (pdd->l3_offset != DAQ_PKT_DECODE_OFFSET_INVALID)
      |         ^~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:140:27: error: ‘DAQ_PKT_DECODE_OFFSET_INVALID’ was 
not declared in this scope
  140 |     if (pdd->l3_offset != DAQ_PKT_DECODE_OFFSET_INVALID)
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:142:31: error: ‘daq_msg_get_data’ was not declared 
in this scope
  142 |         const uint8_t* data = daq_msg_get_data(raw.daq_msg);
      |                               ^~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc: In member function ‘virtual bool 
{anonymous}::Ipv4Codec::decode(const snort::RawData&, snort::CodecData&, DecodeData&)’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:245:11: error: ‘DAQ_NAPTInfo_t’ does not name a 
type; did you mean ‘DAQ_VPN_Info_t’?
  245 |     const DAQ_NAPTInfo_t* napti = (const DAQ_NAPTInfo_t*) daq_msg_get_meta(raw.daq_msg, DAQ_PKT_META_NAPT_INFO);
      |           ^~~~~~~~~~~~~~
      |           DAQ_VPN_Info_t
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:246:9: error: ‘napti’ was not declared in this 
scope
  246 |     if (napti && codec.ip_layer_cnt == napti->ip_layer)
      |         ^~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:250:40: error: ‘daq_napt_info_src_addr_family’ was 
not declared in this scope
  250 |         real_src.set(&napti->src_addr, daq_napt_info_src_addr_family(napti));
      |                                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_ipv4.cc:251:40: error: ‘daq_napt_info_dst_addr_family’ was 
not declared in this scope
  251 |         real_dst.set(&napti->dst_addr, daq_napt_info_dst_addr_family(napti));
      |                                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
make[2]: *** [src/codecs/ip/CMakeFiles/ip_codecs.dir/build.make:76 : 
src/codecs/ip/CMakeFiles/ip_codecs.dir/cd_ipv4.cc.o] Erreur 1
make[2]: *** Attente des tâches non terminées....
In file included from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet_manager.h:31,
                 from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/packet_io/active.h:27,
                 from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/actions/act_block.cc:26:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h:146:5: error: ‘DAQ_Msg_h’ does not name a type
  146 |     DAQ_Msg_h daq_msg;              // DAQ message this packet came from
      |     ^~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h: In member function ‘bool 
snort::Packet::is_inter_group_flow() const’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/protocols/packet.h:337:29: error: ‘DAQ_PKT_FLAG_SIGNIFICANT_GROUPS’ was 
not declared in this scope
  337 |     { return (pkth->flags & DAQ_PKT_FLAG_SIGNIFICANT_GROUPS) != 0; }
      |                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /home/dorianrosse/snort_src/snort3-3.1.36.0/src/actions/act_block.cc:26:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/packet_io/active.h: At global scope:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/packet_io/active.h:212:25: error: ‘DAQ_Msg_h’ has not been declared
  212 |     static int send_eth(DAQ_Msg_h, int, const uint8_t* buf, uint32_t len);
      |                         ^~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/packet_io/active.h:213:24: error: ‘DAQ_Msg_h’ has not been declared
  213 |     static int send_ip(DAQ_Msg_h, int, const uint8_t* buf, uint32_t len);
      |                        ^~~~~~~~~
make[2]: *** [src/actions/CMakeFiles/ips_actions.dir/build.make:118 : 
src/actions/CMakeFiles/ips_actions.dir/act_block.cc.o] Erreur 1
make[1]: *** [CMakeFiles/Makefile2:2734 : src/actions/CMakeFiles/ips_actions.dir/all] Erreur 2
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc: In member function ‘bool 
{anonymous}::TcpCodec::valid_checksum_from_daq(const snort::RawData&)’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:156:11: error: ‘DAQ_PktDecodeData_t’ does not name 
a type
  156 |     const DAQ_PktDecodeData_t* pdd =
      |           ^~~~~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:158:10: error: ‘pdd’ was not declared in this scope
  158 |     if (!pdd || !pdd->flags.bits.l4_checksum || !pdd->flags.bits.tcp || !pdd->flags.bits.l4)
      |          ^~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:161:9: error: ‘pdd’ was not declared in this scope
  161 |     if (pdd->l4_offset != DAQ_PKT_DECODE_OFFSET_INVALID)
      |         ^~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:161:27: error: ‘DAQ_PKT_DECODE_OFFSET_INVALID’ was 
not declared in this scope
  161 |     if (pdd->l4_offset != DAQ_PKT_DECODE_OFFSET_INVALID)
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:163:31: error: ‘daq_msg_get_data’ was not declared 
in this scope
  163 |         const uint8_t* data = daq_msg_get_data(raw.daq_msg);
      |                               ^~~~~~~~~~~~~~~~
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc: In member function ‘virtual bool 
{anonymous}::TcpCodec::decode(const snort::RawData&, snort::CodecData&, DecodeData&)’:
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:274:11: error: ‘DAQ_NAPTInfo_t’ does not name a 
type; did you mean ‘DAQ_VPN_Info_t’?
  274 |     const DAQ_NAPTInfo_t* napti = (const DAQ_NAPTInfo_t*) daq_msg_get_meta(raw.daq_msg, DAQ_PKT_META_NAPT_INFO);
      |           ^~~~~~~~~~~~~~
      |           DAQ_VPN_Info_t
/home/dorianrosse/snort_src/snort3-3.1.36.0/src/codecs/ip/cd_tcp.cc:275:9: error: ‘napti’ was not declared in this scope
  275 |     if (napti && codec.ip_layer_cnt == napti->ip_layer)
      |         ^~~~~
make[2]: *** [src/codecs/ip/CMakeFiles/ip_codecs.dir/build.make:104 : 
src/codecs/ip/CMakeFiles/ip_codecs.dir/cd_tcp.cc.o] Erreur 1
make[1]: *** [CMakeFiles/Makefile2:2838 : src/codecs/ip/CMakeFiles/ip_codecs.dir/all] Erreur 2
make: *** [Makefile:156 : all] Erreur 2
'''

thanks you in advance to help myself fully repair one of both snort or else i remove my subscribing of snort,

regards.


Dorian ROSSE.

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!