Snort upgrade

Do to the recent SNORT vulnerability I decided to upgrade our snort from 2.4.3 to 2.6.1.3 which should be a simple process. However, during the make I kept getting an error

...
>In file included from ../include/sf_snort_plugin_api.h:39,
  from dcerpc_config.c:41: /usr/include/netinet/in.h:235:   
  syntax error before `in_addr_t' /usr/include/netinet/in.h:287: 
  syntax error before `u_char'
>In file included from /usr/include/netinet/in.h:469,
>                from ../include/sf_snort_plugin_api.h:39,
>                from dcerpc_config.c:41:

Turns out, with a bit of googling, that the fix is to change the order in which <netinet/in.h> and <sys/types.h> are included in the file snort-2.6.1.3/src/dynamic-plugins/sf_engine/sf_snort_plugin_api.h. So, a fresh untar and a file change later and the make works fine. Google is freaking great.

blog/snort_upgrade.txt · Last modified: 2007/03/08 05:24 by stealth
 
 
 
Recent changes RSS feed Creative Commons License Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki