Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]

Re: [Snort-users] Snort failed to install using Phil Woods' shared memor

Subject: Re: [Snort-users] Snort failed to install using Phil Woods' shared memory ring buffer libpcap
Date: Fri, 28 Jan 2005 11:23:45 +0000


--On 21 December 2004 11:56 +0800 Steve Smith <steves@is-focus.net> wrote:

I am installing Snort 2.20 using the MMaped libpcap from Phil Woods
web-site: http://public.lanl.gov/cpw/.
The latest version of the MMAPed libpcap is: libpcap-1.0.20041001

The Snort installation went well without any problem under Fedora Core 1.

However, the same installation under Fedora core 2, I got the following
error messages:

 /usr/local/lib/libpcap.a(pcap-ring.o)(.text+0x4d4): In function
`pcap_ring_recv':
/usr/local/src/libpcap/pcap-ring.c:392: undefined reference to `mb'
collect2: ld returned 1 exit status

The Fedora core 2 kernel version is: Linux 2.6.9-1.6

Any ideas or suggestions?

mb() is defined as a macro in /usr/include/asm/system.h on kernel 2.4-based FC1. This seems not to be the case with the glibc-kernheaders package included in FC3 (probably FC2, too, as both are kernel 2.6-based).


I've no idea if this'll work, but I'd try adding the following lines from FC1's system.h

#define mb()    __asm__ __volatile__ ("lock; addl $0,0(%%esp)": : :"memory")

(all on one line).

Thanks.
SS

Please report back on your success or failure, as I'm going to need to do something similar soon. ;-)


Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>
  • Re: [Snort-users] Snort failed to install using Phil Woods' shared memory ring buffer libpcap, Alex Butcher, ISC/ISYS <=