Snort_inline was just updated to Snort 2.8.3 in SVN. Please give it a try. It hasn’t seen much testing so far, so be careful when putting it on production servers.
Get the code from SVN like this:
svn co https://snort-inline.svn.sourceforge.net/svnroot/snort-inline/trunk
Check it out!
Hi,
I have an issue compiling svn head:
gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../../src -I../../src/sfutil -I/usr/include/pcap -I../../src/output-plugins -I../../src/detection-plugins -I../../src/dynamic-plugins -I../../src/preprocessors -I../../src/preprocessors/flow -I../../src/preprocessors/portscan -I../../src/preprocessors/flow/int-snort -I../../src/preprocessors/HttpInspect/include -I../../src/preprocessors/Stream5 -I../../src/target-based -fno-strict-aliasing -g -O2 -Wall -DDYNAMIC_PLUGIN -DDETECTION_OPTION_TREE -fno-strict-aliasing -c sf_dynamic_plugins.c
sf_dynamic_plugins.c: In function ‘DynamicDropInline’:
sf_dynamic_plugins.c:1155: warning: implicit declaration of function ‘InlineDrop’
sf_dynamic_plugins.c: In function ‘InitDynamicPreprocessors’:
sf_dynamic_plugins.c:1243: error: ‘InlineMode’ undeclared (first use in this function)
sf_dynamic_plugins.c:1243: error: (Each undeclared identifier is reported only once
sf_dynamic_plugins.c:1243: error: for each function it appears in.)
make[4]: *** [sf_dynamic_plugins.o] Error 1
anyway, thanks for you work upon snort inline!
Did you run the ‘autojunk.sh’ script before running configure and make? If you didn’t, please try that!
You have to run ./configure –enable-inline –enable-nfnetlink. –enable-nfnetlink to enable new netfilter api instead of old ipq api and –enable-inline to specify preprocessor flags as GIDS etc. It works well for me.
I got current snort_inline version 2.8.4.1.
When I configured the source, I got an error ” Libpcre library version >= 6.0 not found. So I installed pcre-8.0, but the error did not cleared.
I configured the source ‘–with-libpcre-includes=/usr/include/ –with-libpcre-libraries=/usr/lib/’ option, but I got the same error.
How can I fix this problem?
Thanks in advance.