Hi Alex,<br>Yes there is a problem with compiling on FreeBSD - but it will be fixed very soon.<br><br>thanks<br><br><div class="gmail_quote">On Mon, Jul 2, 2012 at 7:31 AM, Alex Shim <span dir="ltr"><<a href="mailto:r3dham@gmail.com" target="_blank">r3dham@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
I can't compile suricata-1.3rc1 on FreeBSD9.<br>
<br>
---------------------------------------------------------------<br>
# ./configure<br>
<br>
(...)<br>
<br>
Suricata Configuration:<br>
  AF_PACKET support:                       no<br>
  PF_RING support:                         no<br>
  NFQueue support:                         no<br>
  IPFW support:                            no<br>
  DAG enabled:                             no<br>
  Napatech enabled:                        no<br>
<br>
  libnss support:                          no<br>
  libnspr support:                         no<br>
  Prelude support:                         no<br>
  PCRE jit:                                yes<br>
  Non-bundled htp:                         no<br>
  Old barnyard2 support:                   no<br>
  CUDA enabled:                            no<br>
<br>
  Unit tests enabled:                      no<br>
  Debug output enabled:                    no<br>
  Debug validation enabled:                no<br>
  Profiling enabled:                       no<br>
  Profiling locks enabled:                 no<br>
<br>
Generic build parameters:<br>
  Installation prefix (--prefix):          /usr/local<br>
  Configuration directory (--sysconfdir):  /usr/local/etc/suricata/<br>
  Log directory (--localstatedir) :        /usr/local/var/log/suricata/<br>
<br>
  Host:                                    x86_64-unknown-freebsd9.0<br>
  GCC binary:                              gcc<br>
  GCC Protect enabled:                     no<br>
  GCC march native enabled:                yes<br>
  GCC Profile enabled:                     no<br>
<br>
(...)<br>
<br>
# make<br>
<br>
(...)<br>
<div class="im"><br>
flow-manager.c: In function 'FlowManagerThread':<br>
flow-manager.c:426: error: expected expression before '<' token<br>
*** Error code 1<br>
<br>
</div>Stop in /usr/local/src/suricata-1.3rc1/src.<br>
*** Error code 1<br>
<br>
Stop in /usr/local/src/suricata-1.3rc1/src.<br>
*** Error code 1<br>
<br>
Stop in /usr/local/src/suricata-1.3rc1.<br>
*** Error code 1<br>
<br>
Stop in /usr/local/src/suricata-1.3rc1.<br>
---------------------------------------------------------------<br>
<br>
Suricata1.3beta2 had no problem for compiling before.<br>
<br>
Cheers,<br>
Alex<br>
<div><div class="h5"><br>
<br>
2012. 6. 30., pm 3:36, Victor Julien wrote:<br>
<br>
The OISF development team is proud to announce Suricata 1.3rc1, the<br>
first (and hopefully only) release candidate for Suricata 1.3. This<br>
release improves stability and accuracy, in addition to adding a few new<br>
exciting features.<br>
<br>
Get the new release here:<br>
<a href="http://www.openinfosecfoundation.org/download/suricata-1.3rc1.tar.gz" target="_blank">http://www.openinfosecfoundation.org/download/suricata-1.3rc1.tar.gz</a><br>
<br>
The new release comes with a number of important improvements and fixes.<br>
<br>
New features<br>
<br>
- http_user_agent keyword for matching on the HTTP User-Agent header<br>
- experimental live rule reload by sending a USR2 signal (#279)<br>
- AF_PACKET BPF support (#449)<br>
- AF_PACKET live packet loss counters (#441)<br>
- Rule analyzer (#349)<br>
- add pcap workers runmode for use with libpcap wrappers that support<br>
load balancing, such as  Napatech's or Myricom's<br>
- negated filemd5 matching, allowing for md5 whitelisting<br>
<br>
Improvements<br>
<br>
- signatures with depth and/or offset are now checked against packets in<br>
addition to the stream (#404)<br>
- http_cookie keyword now also inspects "Set-Cookie" header (#479)<br>
- filemd5 keyword no longer depends on log-file output module (#447)<br>
- http_raw_header keyword inspects original header line terminators (#475)<br>
- deal with double encoded URI (#464)<br>
<br>
Fixes<br>
<br>
- improved SMB/SMB2/DCERPC robustness<br>
- ICMPv6 parsing fixes<br>
- improve HTTP body inspection<br>
- stream.inline accuracy issues fixed (#339)<br>
- general stability fixes (#482, #486)<br>
- missing unittests added (#471)<br>
- "threshold.conf not found" error made more clear (#446)<br>
- IPS mode segment logging for Unified2 improved<br>
<br>
Known issues & missing features<br>
<br>
This is a "release candidate"-quality release so the stability should be<br>
good although unexpected corner cases might happen. If you encounter<br>
one, please let us know!<br>
<br>
As always, we are doing our best to make you aware of continuing<br>
development and items within the engine that are not yet complete or<br>
optimal.  With this in mind, please notice the list we have included of<br>
known items we are working on.<br>
<br>
See <a href="http://redmine.openinfosecfoundation.org/projects/suricata/issues" target="_blank">http://redmine.openinfosecfoundation.org/projects/suricata/issues</a><br>
for an up to date list and to report new issues. See<br>
<a href="http://redmine.openinfosecfoundation.org/projects/suricata/wiki/Known_issues" target="_blank">http://redmine.openinfosecfoundation.org/projects/suricata/wiki/Known_issues</a><br>
for a discussion and time line for the major issues.<br>
<br>
--<br>
---------------------------------------------<br>
Victor Julien<br>
<a href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br>
PGP: <a href="http://www.inliniac.net/victorjulien.asc" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
---------------------------------------------<br>
<br>
<br>
_______________________________________________<br>
</div></div>Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br>
_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
</blockquote></div><br><br clear="all"><br>-- <br><div>Regards,</div>
<div>Peter Manev</div><br>