mbox

snort 2.9.7.6: removed unrecognized configure options in lfs file

Message ID 1445873352-17743-1-git-send-email-matthias.fischer@ipfire.org
State Accepted
Commit c267b2da2dc5617b0daee33f3fceb4f81a3bb3cf
Headers

Message

Matthias Fischer Oct. 27, 2015, 2:29 a.m. UTC 
  Hi,

On 15.10.2015 16:37, Michael Tremer wrote:
> This patch won't apply. Don't know why.

Hm. Any hint whats happening?

I tested this patch today with a clean build and everything went ok, except for some configure warnings:

"configure: WARNING: unrecognized options: --disable-nls, --enable-smb-alerts, --enable-decoder-preprocessor-rules, --enable-zlib"

I removed these options.

Besides, this version is running now for about three weeks without noticeable errors:

***SNIP***
...
04:47:21 snort[16832]: ,,_ -*> Snort! <*-
04:47:22 snort[16832]: o" )~ Version 2.9.7.6 GRE (Build 285)
04:47:22 snort[16832]: '''' By Martin Roesch & The Snort Team: http://www.snort.org/contact#team
04:47:22 snort[16832]: Copyright (C) 2014-2015 Cisco and/or its affiliates. All rights reserved.
04:47:22 snort[16832]: Copyright (C) 1998-2013 Sourcefire, Inc., et al.
04:47:22 snort[16832]: Using libpcap version 1.7.4
04:47:22 snort[16832]: Using PCRE version: 8.37 2015-04-28
04:47:22 snort[16832]: Using ZLIB version: 1.2.8
...
***SNAP***

Can I investigate further?

Regards
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 lfs/snort | 4 ----
 1 file changed, 4 deletions(-)

Comments

Michael Tremer Oct. 27, 2015, 5:24 a.m. UTC | #1 
Hi,

On Mon, 2015-10-26 at 16:29 +0100, Matthias Fischer wrote:
> Hi,
> 
> On 15.10.2015 16:37, Michael Tremer wrote:
> > This patch won't apply. Don't know why.
> 
> Hm. Any hint whats happening?
> 
> I tested this patch today with a clean build and everything went ok,
> except for some configure warnings:
> 
> "configure: WARNING: unrecognized options: --disable-nls, --enable
> -smb-alerts, --enable-decoder-preprocessor-rules, --enable-zlib"
> 
> I removed these options.
> 
> Besides, this version is running now for about three weeks without
> noticeable errors:
> 
> ***SNIP***
> ...
> 04:47:21 snort[16832]: ,,_ -*> Snort! <*-
> 04:47:22 snort[16832]: o" )~ Version 2.9.7.6 GRE (Build 285)
> 04:47:22 snort[16832]: '''' By Martin Roesch & The Snort Team: 
> http://www.snort.org/contact#team
> 04:47:22 snort[16832]: Copyright (C) 2014-2015 Cisco and/or its
> affiliates. All rights reserved.
> 04:47:22 snort[16832]: Copyright (C) 1998-2013 Sourcefire, Inc., et
> al.
> 04:47:22 snort[16832]: Using libpcap version 1.7.4
> 04:47:22 snort[16832]: Using PCRE version: 8.37 2015-04-28
> 04:47:22 snort[16832]: Using ZLIB version: 1.2.8
> ...
> ***SNAP***
> 
> Can I investigate further?

Could you simply upload me your git branch with these changes and I
pull them instead?

-Michael

> 
> Regards
> Matthias
> 
> Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
> ---
>  lfs/snort | 4 ----
>  1 file changed, 4 deletions(-)
> 
> diff --git a/lfs/snort b/lfs/snort
> index a8318db..148f539 100644
> --- a/lfs/snort
> +++ b/lfs/snort
> @@ -72,18 +72,14 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
>  	@rm -rf $(DIR_APP) $(DIR_SRC)/snort* && cd $(DIR_SRC) && tar
> zxf $(DIR_DL)/$(DL_FILE)
>  	cd $(DIR_APP) && ./configure \
>  		--prefix=/usr \
> -		--disable-nls \
>  		--sysconfdir=/etc/snort \
>  		--target=i586 \
>  		--enable-linux-smp-stats \
> -		--enable-smb-alerts \
>  		--enable-gre --enable-mpls \
>  		--enable-targetbased \
> -		--enable-decoder-preprocessor-rules \
>  		--enable-ppm \
>  		--enable-non-ether-decoders \
>  		--enable-perfprofiling \
> -		--enable-zlib \
>  		--enable-active-response \
>  		--enable-normalizer \
>  		--enable-reload \
Michael Tremer Nov. 1, 2015, 5:29 a.m. UTC | #2 
That pulls in an update for snort, too. Right?

You mean this commit?

http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commitdiff;h=2a67ace74a8aed9bd2d5b3f4542a2aab36577c57

-Michael

On Fri, 2015-10-30 at 18:59 +0100, Matthias Fischer wrote:
> Hi,
> 
> I recently also pushed an update for 'ids.cgi', regarding the updated
> snort rules:
> 
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=blob;f=html
> /cgi
> -bin/ids.cgi;h=f17b16a799f17b7e8912de8bc7e472368196bb92;hb=2a67ace74a
> 8aed9bd2d5b3f4542a2aab36577c57
> 
> Since this has been asked in the forum a few days ago - shouldn't we 
> integrate this, either?
> 
> Best,
> Matthias
> 
> On 27.10.2015 15:38, Michael Tremer wrote:
> > Alright. I merged this. Thanks.
> > 
> > -Michael
> > 
> > On Mon, 2015-10-26 at 20:17 +0100, Matthias Fischer wrote:
> > > Hi Michael,
> > > 
> > > On 26.10.2015 19:24, Michael Tremer wrote:
> > > > Could you simply upload me your git branch with these changes
> > > > and I
> > > > pull them instead?
> > > 
> > > You find it here:
> > > 
> > > http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=shortlo
> > > g;h=
> > > refs/heads/snort
> > > 
> > > Best,
> > > Matthias
> > > 
> > > 
> > 
>
Matthias Fischer Nov. 1, 2015, 5:58 a.m. UTC | #3 
On 31.10.2015 19:29, Michael Tremer wrote:
> That pulls in an update for snort, too. Right?
>
> You mean this commit?

Exactly. But only the CGI-file, the LFS-file still contains the unknown 
configure-options.

Best,
Matthias
Michael Tremer Nov. 1, 2015, 11:58 a.m. UTC | #4 
On Sat, 2015-10-31 at 19:58 +0100, Matthias Fischer wrote:
> On 31.10.2015 19:29, Michael Tremer wrote:
> > That pulls in an update for snort, too. Right?
> > 
> > You mean this commit?
> 
> Exactly. But only the CGI-file, the LFS-file still contains the
> unknown 
> configure-options.

Shouldn't the version of the rules and snort be the same?

This is a diff which only changes what is shown there. The configure
flags won't get touched it I would merge this patch.

-Michael

> 
> Best,
> Matthias