[Oisf-devel] compil pb on suricata v0.8.0

Matt Jonkman jonkman at jonkmans.com
Sat Jan 2 00:20:44 UTC 2010


What platform and release are you on as well?

Thanks for testing!

Matt

On 1/1/10 5:58 PM, Pablo wrote:
> Did you do make install on the htp library?
> 
>> El 1 de ene de 2010, 10:21 p.m., "rmkml" <rmkml at free.fr
>> <mailto:rmkml at free.fr>> escribió:
>>
>> Hi,
>> Congratulations and Happy New Year!
>> I have a pb for compil suricata v0.8.0
>> (http://www.openinfosecfoundation.org/download/suricata-current.tar.gz)
>>
>> wget http://www.openinfosecfoundation.org/download/htp-current.tar.gz
>>  tar -xzvf htp-current.tar.gz
>>  cd htp-<version>
>>  ./configure
>>  make
>>  make check
>>
>> wget http://pyyaml.org/download/libyaml/yaml-0.1.3.tar.gz
>>  tar xzf yaml-0.1.3.tar.gz
>>  ./configure
>>  make
>>  make check
>>
>> tar xzf suricata-0.8.0_current.tar.gz
>> ./configure --with-libhtp-includes=../htp-0.2.1
>> --with-libhtp-libraries=../htp-0.2.1/htp/.libs
>> --with-libyaml-includes=../yaml-0.1.3/include
>> --with-libyaml-libraries=../yaml-0.1.3/src/.libs
>> make
>> ...
>> gcc -DHAVE_CONFIG_H -I. -I..   -I../yaml-0.1.3/include -I../htp-0.2.1
>>  -g -O2 -Wall -fno-strict-aliasing -D_BSD_SOURCE -D__BSD_SOURCE
>> -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H -DLIBPCAP_VERSION_MAJOR=0 -MT
>> suricata.o -MD -MP -MF .deps/suricata.Tpo -c -o suricata.o suricata.c
>> In file included from suricata.c:69:
>> app-layer-htp.h:26: erreur: expected specifier-qualifier-list before
>> ‘htp_connp_t’
>> app-layer-htp.h:31: erreur: expected ‘=’, ‘,’, ‘;’, ‘asm’ or
>> ‘__attribute__’ before ‘*’ token
>> suricata.c: In function ‘main’:
>> suricata.c:298: attention : unused variable ‘regex_arg’
>> ...
>>
>>
>> ok fixed by commented this line on src/app-layer-htp.h :
>>  //#include <htp/htp.h>
>>
>>  //typedef struct HtpState_ {
>>  //    htp_connp_t *connp; /**< Connection parser structure for each
>> connection */
>>  //    uint8_t flags;
>>  //} HtpState;
>>  //htp_cfg_t *cfg; /**< Config structure for HTP library */
>>
>> Are you sure "HtpState_" need "_" ?
>>
>> compil more but new errors:
>> gcc -DHAVE_CONFIG_H -I. -I..   -I../yaml-0.1.3/include -I../htp-0.2.1
>>  -g -O2 -Wall -fno-strict-aliasing -D_BSD_SOURCE -D__BSD_SOURCE
>> -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H -DLIBPCAP_VERSION_MAJOR=0 -MT
>> detect-http-cookie.o -MD -MP -MF .deps/detect-http-cookie.Tpo -c -o
>> detect-http-cookie.o detect-http-cookie.c
>> detect-http-cookie.c: In function ‘DetectHttpCookieMatch’:
>> detect-http-cookie.c:82: erreur: ‘HtpState’ undeclared (first use in
>> this function)
>> detect-http-cookie.c:82: erreur: (Each undeclared identifier is
>> reported only once
>> detect-http-cookie.c:82: erreur: for each function it appears in.)
>> detect-http-cookie.c:82: erreur: ‘htp_state’ undeclared (first use in
>> this function)
>> detect-http-cookie.c:82: erreur: expected expression before ‘)’ token
>> detect-http-cookie.c:102: erreur: ‘htp_tx_t’ undeclared (first use in
>> this function)
>> detect-http-cookie.c:102: erreur: ‘tx’ undeclared (first use in this
>> function)
>> detect-http-cookie.c:102: attention : implicit declaration of function
>> ‘list_get’
>> detect-http-cookie.c:108: erreur: ‘htp_header_t’ undeclared (first use
>> in this function)
>> detect-http-cookie.c:108: erreur: ‘h’ undeclared (first use in this
>> function)
>> detect-http-cookie.c:109: erreur: expected expression before ‘)’ token
>> detect-http-cookie.c:117: attention : implicit declaration of function
>> ‘bstr_ptr’
>> detect-http-cookie.c:117: attention : implicit declaration of function
>> ‘bstr_size’
>> ...
>>
>> and on src/app-layer-htp.c, why
>>  HTPParserTest01() use htp_state
>>  HTPParserTest02() use http_state
>>  HTPParserTest03() use htp_state
>>  HTPParserTest04() use htp_state
>>  HTPParserTest05() use http_state
>> two htp_state and http_state ? or it's a bug ?
>>
>> Regards
>> Rmkml
>> Crusoe-Researches.com
>> _______________________________________________
>> Oisf-devel mailing list
>> Oisf-devel at openinfosecfoundation.org
>> <mailto:Oisf-devel at openinfosecfoundation.org>
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>>
> 
> 
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel

-- 

----------------------------------------------------
Matthew Jonkman
Emerging Threats
Open Information Security Foundation (OISF)
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
http://www.openinformationsecurityfoundation.org
----------------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc



More information about the Oisf-devel mailing list