Do to the recent SNORT vulnerability I decided to upgrade our snort from 2.4.3 to 2.6.1.3 which should be a simple process. However, during the make I kept getting an error
... >In file included from ../include/sf_snort_plugin_api.h:39, from dcerpc_config.c:41: /usr/include/netinet/in.h:235: syntax error before `in_addr_t' /usr/include/netinet/in.h:287: syntax error before `u_char' >In file included from /usr/include/netinet/in.h:469, > from ../include/sf_snort_plugin_api.h:39, > from dcerpc_config.c:41:
Turns out, with a bit of googling, that the fix is to change the order in which <netinet/in.h> and <sys/types.h> are included in the file snort-2.6.1.3/src/dynamic-plugins/sf_engine/sf_snort_plugin_api.h. So, a fresh untar and a file change later and the make works fine. Google is freaking great.