From owner-freebsd-security@FreeBSD.ORG Tue May 27 07:17:55 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7C8761065682 for ; Tue, 27 May 2008 07:17:55 +0000 (UTC) (envelope-from ipfreak@yahoo.com) Received: from web52108.mail.re2.yahoo.com (web52108.mail.re2.yahoo.com [206.190.48.111]) by mx1.freebsd.org (Postfix) with SMTP id B3F338FC2A for ; Tue, 27 May 2008 07:17:54 +0000 (UTC) (envelope-from ipfreak@yahoo.com) Received: (qmail 32482 invoked by uid 60001); 27 May 2008 06:51:12 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=hANHhXh/UVKu/xaVcq5fEyBVkKl0goiwzgnd8xbwrqIJ5orkwFxrIOUIcvWefjAbSyJYbARJ1fk30IxZczqkmLqexvAmFdcR/GbOTbtPdjOvO8wobs4NaGPYp0vdbO/wifFT6sRcSoldrCp1DPmkYBsBcRW9rxMXw8AG8DQFrrM=; X-YMail-OSG: SrAlM5gVM1lYCGwvKX0Z0yBcR0RTfU_MukT__sylcyQSCg72vYwJB9rNMAvUQehrZgKBgF8DmRzrH.mWTRjNl37vsufDvTjvDuQd Received: from [70.190.145.127] by web52108.mail.re2.yahoo.com via HTTP; Mon, 26 May 2008 23:51:12 PDT X-Mailer: YahooMailRC/975.41 YahooMailWebService/0.7.185 Date: Mon, 26 May 2008 23:51:12 -0700 (PDT) From: gahn To: freebsd general questions , freebsd security MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Message-ID: <451466.32114.qm@web52108.mail.re2.yahoo.com> Cc: Subject: freebsd and snort X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2008 07:17:55 -0000 Hello all: I tried to install snort under /usr/ports/security and have some problems. with "make all", I checked every item on the menu but I got error messages: ////////////////////////////// laptop# make all ===> snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not incorporate cleanly. *** Error code 1 Stop in /usr/ports/security/snort. /////////////////////////////// tried "make distclean" and it didn't seem to help to clear the problem. Looked at the timestamps on the files and I don't see any files modified by the command "make all" could anyone help me on this? Thanks From owner-freebsd-security@FreeBSD.ORG Tue May 27 08:25:53 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A70091065679 for ; Tue, 27 May 2008 08:25:53 +0000 (UTC) (envelope-from swhetzel@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.233]) by mx1.freebsd.org (Postfix) with ESMTP id 57D478FC19 for ; Tue, 27 May 2008 08:25:53 +0000 (UTC) (envelope-from swhetzel@gmail.com) Received: by rv-out-0506.google.com with SMTP id b25so2762927rvf.43 for ; Tue, 27 May 2008 01:25:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=jPg3lslb7wvAoiUjHT/Q+NjF6+8A/TFlUFlIsJ8xsyA=; b=pVgpQEKXatotq+rP5dK7cNalrqj1KhDaXvfVm9mfKNq8SSyGmbMXclr5RLYiydLX37OihoZ9tcuWHgrhKz/uT06J5e/u1pQTyN0WmcIlA7SAzVWEE+RTveW9L+N3kA2lZGdjGxZbgzvoYKZ1A5HH5yH6jju++IH86FULP0hAm7M= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=fygsrvuz1OTMlTvjOm55hfynt6iON66U4EKbm2d7cJw0mHRdT0WsQlg9a/qhP/fPjPdkkdMmaE2QXUOj4o70w4kOw/21BDa2BaTvDzaGZKCg2w/ogyIPHuqse8+xkjnQX5pZzHtiMSB4yUTBnD85JhaDBYbznYDGiJ6dMcKf6Cc= Received: by 10.140.170.12 with SMTP id s12mr411075rve.101.1211875058727; Tue, 27 May 2008 00:57:38 -0700 (PDT) Received: by 10.141.41.4 with HTTP; Tue, 27 May 2008 00:57:38 -0700 (PDT) Message-ID: <790a9fff0805270057v2aa0959byac63d5659ae61b8@mail.gmail.com> Date: Tue, 27 May 2008 02:57:38 -0500 From: "Scot Hetzel" To: gahn In-Reply-To: <451466.32114.qm@web52108.mail.re2.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <451466.32114.qm@web52108.mail.re2.yahoo.com> Cc: freebsd security , freebsd general questions Subject: Re: freebsd and snort X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2008 08:25:53 -0000 On 5/27/08, gahn wrote: > Hello all: > > I tried to install snort under /usr/ports/security and have some problems. with "make all", I checked every item on the menu but I got error messages: > > ////////////////////////////// > > laptop# make all > ===> snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not incorporate cleanly. > *** Error code 1 > > Stop in /usr/ports/security/snort. > > /////////////////////////////// > > tried "make distclean" and it didn't seem to help to clear the problem. Looked at the timestamps on the files and I don't see any files modified by the command "make all" > > could anyone help me on this? > Use "make config" to bring up the Options screen, and check FLEXRESP and uncheck FLEXRESP2. Scot From owner-freebsd-security@FreeBSD.ORG Tue May 27 08:31:57 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8A9151065684 for ; Tue, 27 May 2008 08:31:57 +0000 (UTC) (envelope-from roberto.nunnari@supsi.ch) Received: from ti-edu.ch (posta.ti-edu.ch [195.176.176.171]) by mx1.freebsd.org (Postfix) with ESMTP id 11F4C8FC22 for ; Tue, 27 May 2008 08:31:56 +0000 (UTC) (envelope-from roberto.nunnari@supsi.ch) X-Virus-Scanned: by cgpav Received: from [193.5.152.27] (HELO [127.0.0.1]) by ti-edu.ch (CommuniGate Pro SMTP 5.1.12) with ESMTP id 26296725; Tue, 27 May 2008 09:31:52 +0200 Message-ID: <483BB927.5070004@supsi.ch> Date: Tue, 27 May 2008 09:32:55 +0200 From: Roberto Nunnari User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: gahn References: <451466.32114.qm@web52108.mail.re2.yahoo.com> In-Reply-To: <451466.32114.qm@web52108.mail.re2.yahoo.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd security , freebsd general questions Subject: Re: freebsd and snort X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2008 08:31:57 -0000 Hello gahn. it's exactly as it says.. the FLEXRESP2 option is broken.. try to build without FLEXRESP2 to change your options do a make config Best regards. Robi gahn wrote: > Hello all: > > I tried to install snort under /usr/ports/security and have some problems. with "make all", I checked every item on the menu but I got error messages: > > ////////////////////////////// > > laptop# make all > ===> snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not incorporate cleanly. > *** Error code 1 > > Stop in /usr/ports/security/snort. > > /////////////////////////////// > > tried "make distclean" and it didn't seem to help to clear the problem. Looked at the timestamps on the files and I don't see any files modified by the command "make all" > > could anyone help me on this? > > Thanks > > > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" From owner-freebsd-security@FreeBSD.ORG Tue May 27 12:41:58 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 051BB1065674 for ; Tue, 27 May 2008 12:41:58 +0000 (UTC) (envelope-from nigel@sourcefire.com) Received: from sourcefire.com (gi.sourcefire.com [64.214.53.10]) by mx1.freebsd.org (Postfix) with ESMTP id D461F8FC15 for ; Tue, 27 May 2008 12:41:57 +0000 (UTC) (envelope-from nigel@sourcefire.com) Received: from localhost (localhost.localdomain [127.0.0.1]) by sourcefire.com (Postfix) with ESMTP id D07F244D249; Tue, 27 May 2008 08:19:49 -0400 (EDT) Received: from sourcefire.com ([127.0.0.1]) by localhost (mail.it.sourcefire.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26314-04; Tue, 27 May 2008 08:19:49 -0400 (EDT) User-Agent: Microsoft-Entourage/10.1.6.040913.0 Date: Tue, 27 May 2008 08:20:06 -0400 From: Nigel Houghton To: gahn Message-ID: In-Reply-To: <451466.32114.qm@web52108.mail.re2.yahoo.com> Mime-version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit X-Virus-Scanned: Sourcefire AV 1.3.2 Cc: freebsd security Subject: Re: freebsd and snort X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2008 12:41:58 -0000 On 5/27/08 2:51 AM, "gahn" wrote: > Hello all: > > I tried to install snort under /usr/ports/security and have some problems. > with "make all", I checked every item on the menu but I got error messages: > > ////////////////////////////// > > laptop# make all > ===> snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not > incorporate cleanly. > *** Error code 1 > > Stop in /usr/ports/security/snort. > > /////////////////////////////// > > tried "make distclean" and it didn't seem to help to clear the problem. Looked > at the timestamps on the files and I don't see any files modified by the > command "make all" > > could anyone help me on this? 1. This is not a question for FreeBSD Security although, I can see why you might think so 2. Do not cross post 3. Did you try to contact the port maintainer or file a bug report? (the port needs updating anyway) Having said all that, I don't know why flexresp2 is needed for a plain snort build. -- Nigel Houghton Resident Hooligan SF VRT From owner-freebsd-security@FreeBSD.ORG Tue May 27 18:11:29 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4ACE11065687 for ; Tue, 27 May 2008 18:11:29 +0000 (UTC) (envelope-from ipfreak@yahoo.com) Received: from web52101.mail.re2.yahoo.com (web52101.mail.re2.yahoo.com [206.190.48.104]) by mx1.freebsd.org (Postfix) with SMTP id D5E2B8FC2C for ; Tue, 27 May 2008 18:11:28 +0000 (UTC) (envelope-from ipfreak@yahoo.com) Received: (qmail 1880 invoked by uid 60001); 27 May 2008 18:11:27 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:Cc:MIME-Version:Content-Type:Message-ID; b=bACN56QGY/X5E9pw0ljjr+kSNsdbzxZiFNNn2ZCkX6LjW3RfO+W7q+HofjzmpesJ3y+Sf3kOyB6J6JSLPf9TNX8HKuONQ2OFsCr5v65seodzMkT7/ctg/fjb3AV3LeoYnmSkhl3d4y6h4AE8elOE1DU2ugcAlF/+cDlQT+bXNxg=; X-YMail-OSG: OtTWWEMVM1mgYXH7IpTBoDMLHz413rq226mzs4yeUyEDyaWAfY3KgnpPx4tfKfGcjgg1mjti.SM1Z8R0QFPmEIXpA9YQOcefCJxI Received: from [70.190.145.127] by web52101.mail.re2.yahoo.com via HTTP; Tue, 27 May 2008 11:11:27 PDT X-Mailer: YahooMailRC/975.41 YahooMailWebService/0.7.185 Date: Tue, 27 May 2008 11:11:27 -0700 (PDT) From: gahn To: Scot Hetzel MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Message-ID: <658053.1394.qm@web52101.mail.re2.yahoo.com> Cc: freebsd security , freebsd general questions Subject: Re: freebsd and snort X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2008 18:11:29 -0000 Thanks. greatly appreciated. Best ----- Original Message ---- From: Scot Hetzel To: gahn Cc: freebsd general questions ; freebsd security Sent: Tuesday, May 27, 2008 12:57:38 AM Subject: Re: freebsd and snort On 5/27/08, gahn wrote: > Hello all: > > I tried to install snort under /usr/ports/security and have some problems. with "make all", I checked every item on the menu but I got error messages: > > ////////////////////////////// > > laptop# make all > ===> snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not incorporate cleanly. > *** Error code 1 > > Stop in /usr/ports/security/snort. > > /////////////////////////////// > > tried "make distclean" and it didn't seem to help to clear the problem. Looked at the timestamps on the files and I don't see any files modified by the command "make all" > > could anyone help me on this? > Use "make config" to bring up the Options screen, and check FLEXRESP and uncheck FLEXRESP2. Scot From owner-freebsd-security@FreeBSD.ORG Tue May 27 19:14:42 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 07753106567A for ; Tue, 27 May 2008 19:14:42 +0000 (UTC) (envelope-from swhetzel@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.238]) by mx1.freebsd.org (Postfix) with ESMTP id D1B828FC1C for ; Tue, 27 May 2008 19:14:41 +0000 (UTC) (envelope-from swhetzel@gmail.com) Received: by rv-out-0506.google.com with SMTP id b25so3050447rvf.43 for ; Tue, 27 May 2008 12:14:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=iPvEEEC0pI9IzOlOuTTmnorofTTQ8OyZwRCzkbs9Si8=; b=uxWBeJ7WhJCGPxJS+gVd6CD/T5z5Wt9oX8R/rHAQewAzLyHRtoN8mwczaf6elPAA0J1EusXwKsAiD8rWEy8/+H0VqGM6dPHH/kEhgd0uXMmB8tBylIc5VEzJGueHhEPj5ENNypORCUvX9O3xspxzHOkDO8O/ezN+QyKpcTks+ps= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=gq9Lqbji1YHG857Nw0drEe4gy1yDAM6916xaTP1pVMIIp5aejK1Q4jDjRR2jE4lXQ0ujc4HBjj5U7C9Y0EC+kHdBbGmrKGP3maiKzPtnRM8fEkh2bMhI5Y9LyrfaJQRKjV/LS4+VOPPe9DoJCTP5mk6pyGvM+lSgAmVecV1Mvok= Received: by 10.141.145.11 with SMTP id x11mr695583rvn.215.1211915680995; Tue, 27 May 2008 12:14:40 -0700 (PDT) Received: by 10.141.41.4 with HTTP; Tue, 27 May 2008 12:14:40 -0700 (PDT) Message-ID: <790a9fff0805271214k4268fffdmaff2b0d3ea29759d@mail.gmail.com> Date: Tue, 27 May 2008 14:14:40 -0500 From: "Scot Hetzel" To: "Nigel Houghton" In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <451466.32114.qm@web52108.mail.re2.yahoo.com> Cc: gahn , freebsd security Subject: Re: freebsd and snort X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2008 19:14:42 -0000 On 5/27/08, Nigel Houghton wrote: > On 5/27/08 2:51 AM, "gahn" wrote: > > > Hello all: > > > > I tried to install snort under /usr/ports/security and have some problems. > > with "make all", I checked every item on the menu but I got error messages: > > > 3. Did you try to contact the port maintainer or file a bug report? (the > port needs updating anyway) > The maintainer knows about the broken state of FLEXSRESP2 patch, as he was the one who submitted the change to mark it broken in revision 1.70 (2006/08/30 04:26:53 clsung) when it was first introduced. It also looks like snort 2.8.1 now incorporates the FLEXRESP2 patch in the main source. I submitted PR 124048 to remove the BROKEN state of FLEXRESP2. http://www.freebsd.org/cgi/query-pr.cgi?pr=124048 > Having said all that, I don't know why flexresp2 is needed for a plain snort > build. > The default state for FLEXRESP2 is OFF. The only OPTION that is enabled is dynamic plugin support (DYNAMIC) for a plain snort build. Scot