snort-devel July 2008 archive
Main Archive Page > Month Archives  > snort-devel archives
snort-devel: Re: [Snort-devel] snort 3 error in config

Re: [Snort-devel] snort 3 error in config

From: Earl <esammons_at_nospam>
Date: Mon Jul 07 2008 - 23:49:20 GMT
To: seclists@rm-rf.co.uk


A guess... He is failing here (after the flex/bison, lex/yac tests...).

Error message matches :)

Earl

# Some versions of lex can't handle the definitions section of scanner.l .
# Try lexing it and complain if it can't deal.

    echo "$as_me:$LINENO: checking for capable lex" >&5 echo $ECHO_N "checking for capable lex... $ECHO_C" >&6 if test "${sf_cv_capable_lex+set}" = set; then   echo $ECHO_N "(cached) $ECHO_C" >&6
else
  if lex -t scanner.l > /dev/null 2>&1; then

        sf_cv_capable_lex=yes
    else

        sf_cv_capable_lex=insufficient
    fi
fi
echo "$as_me:$LINENO: result: $sf_cv_capable_lex" >&5 echo "${ECHO_T}$sf_cv_capable_lex" >&6

    if test $sf_cv_capable_lex = insufficient ; then

        { { echo "$as_me:$LINENO: error: Your operating system's lex is insufficient to compile

        libsbpf. flex is a lex replacement that has many advantages, including being able to compile libsbpf. For more information, see http://www.gnu.org/software/flex/flex.html ." >&5

On Mon, 07 Jul 2008 18:07:33 -0400 Leon Ward <seclists@rm-rf.co.uk> wrote:
>Do you have bison installed?
>Look closely at your config.log for errors.
>
>It looks like when when bison is not available, configure reverts
>back
>to lex/yacc from flex/bison, and therefore uses an insufficient
>lex
>version.
>
>-Leon
>
>Leon Ward Security Engineer EMEA
>Sourcefire, West Forest Gate, Wellington Road
>Wokingham, UK, RG40 2AQ
>
>On 7 Jul 2008, at 21:54, Earl wrote:
>
>> Not having "%name-devel" does create similar problems (iptables-
>> devel, pcre-devel for example) but I don't believe flex-devel
>> exists; at least not in CentOS 5.x.
>>
>> I don't have flex-devel installed on my current CentOS box (even
>if
>> it does exist) and snortsp compiles fine.
>>
>> Additionally, 'flex -V' returns: "flex version 2.5.4"
>>
>> Perhaps it is an "evil" flex earlier in the ${PATH} which the
>'flex
>> -V' test Russ suggests should expose.
>>
>>
>> Earl
>>
>>
>> On Mon, 07 Jul 2008 09:45:45 -0400 Russ Combs
>> <rcombs@sourcefire.com> wrote:
>>> What do you get when you execute `flex -V`?
>>>
>>> If flex is in your PATH you should see something like
>>>
>>> "flex version 2.5.4".
>>>
>>> If you are still having problems, please send your config.log.
>>>
>>> Russ
>>>
>>> On Fri, 2008-07-04 at 23:07 -0700, mehdi gholami wrote:
>>>> Tanx,
>>>> I think installing/removing Snort family tools at many times
>>> make
>>>> that error? Also I installed flex perfect by yum, but my
>snortSP
>>> does
>>>> n ./config ?
>>>>
>>>> can anybody helps me?
>>>>
>>>>
>>>> --- On Sat, 7/5/08, Earl <esammons@hush.com> wrote:
>>>> From: Earl <esammons@hush.com>
>>>> Subject: Re: [Snort-devel] snort 3 error in config
>>>> To: snort-devel@lists.sourceforge.net
>>>> Date: Saturday, July 5, 2008, 9:50 AM
>>>>
>>>> Not seeing this on my CentOS (5.2/current) box. Builds
>>> fine but
>>>> untested.
>>>>
>>>> $rpm -q flex
>>>> flex-2.5.4a-41.fc6
>>>>
>>>> Earl
>>>>
>>>>
>>>> On Sat, 05 Jul 2008 00:19:27 -0400 mehdi gholami
>>>> <mehdy_gholami@yahoo.com> wrote:
>>>>> Hi all,
>>>>> I hav run and installed snort many times til now, but
>>>> I can not
>>>>> config snortSP 3 since it has released.
>>>>> Also please note I intsall all requeirments in my
>>> CentOS 5, my
>>>>> error rsume is below:
>>>>>
>>>>> snortsp-3.0.0.b]# ./configure
>>>>> ............
>>>>> ............
>>>>> checking for pcap_datalink in -lpcap... yes
>>>>> checking for luaL_newstate in -llua... yes
>>>>> checking for capable lex... insufficient
>>>>> configure: error: Your operating system's lex is
>>> insufficient to
>>>>> compile
>>>>> libsbpf. flex is a lex replacement that has
>>> many
>>>>> advantages,
>>>>> including being able to compile libsbpf. For
>>> more
>>>>> information, see
>>>>> http://www.gnu.org/software/flex/flex.html .
>>>>>
>>>>>
>>>>> Please note I have installed flex manually or by yum
>>> tool, but it
>>>>> does not work? I remmember that I had this error before
>>> when I
>>>>> wanted to installed snort-inline, that time I installed
>>> flex by
>>>>> yum tool
>>>> and continue my job.
>>>>> ?
>>>>
>>>>
>>>> --------------------------------------------------------
>-
>>> ----------------
>>>> Sponsored by: SourceForge.net Community Choice Awards:
>>> VOTE NOW!
>>>> Studies have shown that voting for your favorite open
>>> source project,
>>>> along with a healthy diet, reduces your potential for
>>> chronic lameness
>>>> and boredom. Vote Now at
>>> http://www.sourceforge.net/community/cca08
>>>> _______________________________________________
>>>> Snort-devel mailing list
>>>> Snort-devel@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/snort-
>devel
>>>>
>>>> ---------------------------------------------------------------
>--
>>> --------
>>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE
>NOW!
>>>> Studies have shown that voting for your favorite open source
>>> project,
>>>> along with a healthy diet, reduces your potential for chronic
>>> lameness
>>>> and boredom. Vote Now at
>>> http://www.sourceforge.net/community/cca08
>>>> _______________________________________________ Snort-devel
>>> mailing list Snort-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>>
>>>
>>> ----------------------------------------------------------------
>---
>>> ------
>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE
>NOW!
>>> Studies have shown that voting for your favorite open source
>>> project,
>>> along with a healthy diet, reduces your potential for chronic
>>> lameness
>>> and boredom. Vote Now at
>>> http://www.sourceforge.net/community/cca08
>>> _______________________________________________
>>> Snort-devel mailing list
>>> Snort-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>
>>
>> -----------------------------------------------------------------
>--------
>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
>> Studies have shown that voting for your favorite open source
>project,
>> along with a healthy diet, reduces your potential for chronic
>lameness
>> and boredom. Vote Now at
>http://www.sourceforge.net/community/cca08
>> _______________________________________________
>> Snort-devel mailing list
>> Snort-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>



Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel