snort-devel July 2008 archive
Main Archive Page > Month Archives  > snort-devel archives
snort-devel: Re: [Snort-devel] snort 3 error in config

Re: [Snort-devel] snort 3 error in config

From: Leon Ward <seclists_at_nospam>
Date: Mon Jul 07 2008 - 22:07:33 GMT
To: Earl <esammons@hush.com>


Do you have bison installed?
Look closely at your config.log for errors.

It looks like when when bison is not available, configure reverts back to lex/yacc from flex/bison, and therefore uses an insufficient lex version.

-Leon

Leon Ward Security Engineer EMEA
Sourcefire, West Forest Gate, Wellington Road Wokingham, UK, RG40 2AQ

On 7 Jul 2008, at 21:54, Earl wrote:

> Not having "%name-devel" does create similar problems (iptables-
> devel, pcre-devel for example) but I don't believe flex-devel
> exists; at least not in CentOS 5.x.
>
> I don't have flex-devel installed on my current CentOS box (even if
> it does exist) and snortsp compiles fine.
>
> Additionally, 'flex -V' returns: "flex version 2.5.4"
>
> Perhaps it is an "evil" flex earlier in the ${PATH} which the 'flex
> -V' test Russ suggests should expose.
>
>
> Earl
>
>
> On Mon, 07 Jul 2008 09:45:45 -0400 Russ Combs
> <rcombs@sourcefire.com> wrote:
>> What do you get when you execute `flex -V`?
>>
>> If flex is in your PATH you should see something like
>>
>> "flex version 2.5.4".
>>
>> If you are still having problems, please send your config.log.
>>
>> Russ
>>
>> On Fri, 2008-07-04 at 23:07 -0700, mehdi gholami wrote:
>>> Tanx,
>>> I think installing/removing Snort family tools at many times
>> make
>>> that error? Also I installed flex perfect by yum, but my snortSP
>> does
>>> n ./config ?
>>>
>>> can anybody helps me?
>>>
>>>
>>> --- On Sat, 7/5/08, Earl <esammons@hush.com> wrote:
>>> From: Earl <esammons@hush.com>
>>> Subject: Re: [Snort-devel] snort 3 error in config
>>> To: snort-devel@lists.sourceforge.net
>>> Date: Saturday, July 5, 2008, 9:50 AM
>>>
>>> Not seeing this on my CentOS (5.2/current) box. Builds
>> fine but
>>> untested.
>>>
>>> $rpm -q flex
>>> flex-2.5.4a-41.fc6
>>>
>>> Earl
>>>
>>>
>>> On Sat, 05 Jul 2008 00:19:27 -0400 mehdi gholami
>>> <mehdy_gholami@yahoo.com> wrote:
>>>> Hi all,
>>>> I hav run and installed snort many times til now, but
>>> I can not
>>>> config snortSP 3 since it has released.
>>>> Also please note I intsall all requeirments in my
>> CentOS 5, my
>>>> error rsume is below:
>>>>
>>>> snortsp-3.0.0.b]# ./configure
>>>> ............
>>>> ............
>>>> checking for pcap_datalink in -lpcap... yes
>>>> checking for luaL_newstate in -llua... yes
>>>> checking for capable lex... insufficient
>>>> configure: error: Your operating system's lex is
>> insufficient to
>>>> compile
>>>> libsbpf. flex is a lex replacement that has
>> many
>>>> advantages,
>>>> including being able to compile libsbpf. For
>> more
>>>> information, see
>>>> http://www.gnu.org/software/flex/flex.html .
>>>>
>>>>
>>>> Please note I have installed flex manually or by yum
>> tool, but it
>>>> does not work? I remmember that I had this error before
>> when I
>>>> wanted to installed snort-inline, that time I installed
>> flex by
>>>> yum tool
>>> and continue my job.
>>>> ?
>>>
>>>
>>> ---------------------------------------------------------
>> ----------------
>>> Sponsored by: SourceForge.net Community Choice Awards:
>> VOTE NOW!
>>> Studies have shown that voting for your favorite open
>> source project,
>>> along with a healthy diet, reduces your potential for
>> chronic lameness
>>> and boredom. Vote Now at
>> http://www.sourceforge.net/community/cca08
>>> _______________________________________________
>>> Snort-devel mailing list
>>> Snort-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>>
>>> -----------------------------------------------------------------
>> --------
>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
>>> Studies have shown that voting for your favorite open source
>> project,
>>> along with a healthy diet, reduces your potential for chronic
>> lameness
>>> and boredom. Vote Now at
>> http://www.sourceforge.net/community/cca08
>>> _______________________________________________ Snort-devel
>> mailing list Snort-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>
>>
>> -------------------------------------------------------------------
>> ------
>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
>> Studies have shown that voting for your favorite open source
>> project,
>> along with a healthy diet, reduces your potential for chronic
>> lameness
>> and boredom. Vote Now at
>> http://www.sourceforge.net/community/cca08
>> _______________________________________________
>> Snort-devel mailing list
>> Snort-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
>
> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
> _______________________________________________
> Snort-devel mailing list
> Snort-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>



Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08



Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel