Problem installing SnortSP
 

Hi all. I am trying to install SnortSp using the instructions found here:

http://securityonion.blogspot.com/20...beta-3-on.html

all is good so far outside of the name and download location of the snort package (459 vice the name of the file:0 )

Problem comes when I get to: ./configure

everything is going until:

checking for pcap_datalink in -lpcap... yes
checking for luaL_newstate in -llua5.1... no
checking for luaL_newstate in -llua... no

ERROR! Lua library/headers not found, go get it from
http://www.lua.org

Now I know that lua is installed, it appears in the ubuntu software manager, but I don't know how to get the needed files or what they are called, etc. help?

OS: xubuntu

Sounds like you need to install the lua-devel package, which you can find here: http://pkgs.org/package/lua-devel

okay, I was able to find lua-dev in USM (the quoted website didnt have a ubuntu package).

I may use this thread for other issues during this install if you guys dont mind.

I miss windows binaries. :(

EDITED out for clarity

FYI, I went back and started over, my first error occurs during the first "make"

gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src/s_util/libsbpf/bpf -I../../src/s_util/libsbpf/net -I../../src/s_util -I../../src/s_util/include -I../../src/data_source -I../../src/data_source/daq -I../../src/data_source/decode -I../../src/data_source/flow -I../../src/platform -I../../src/comms -I../../src/analysis -I../../src/output -I.. -I/usr/include/pcap -I/usr/include/pcap -D_GNU_SOURCE -fno-strict-aliasing -I/usr/include/lua5.1 -Wall -Werror -DBUILDING_SO -g -fno-strict-aliasing -fvisibility=hidden -O2 -DLUA_USE_LINUX -D_GNU_SOURCE -MT libsutil_la-s_daemonize.lo -MD -MP -MF .deps/libsutil_la-s_daemonize.Tpo -c s_daemonize.c -fPIC -DPIC -o .libs/libsutil_la-s_daemonize.o
cc1: warnings being treated as errors
s_daemonize.c: In function 's_create_pid_file':
s_daemonize.c:67: error: ignoring return value of 'ftruncate', declared with attribute warn_unused_result
s_daemonize.c:68: error: ignoring return value of 'write', declared with attribute warn_unused_result
make[4]: *** [libsutil_la-s_daemonize.lo] Error 1
make[4]: Leaving directory `/usr/local/src/snortsp-3.0.0b3/src/s_util'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory `/usr/local/src/snortsp-3.0.0b3/src/s_util'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/local/src/snortsp-3.0.0b3/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/snortsp-3.0.0b3'
make: *** [all] Error 2

Not quite clear, which version of Ubuntu, you are using. Please specify.


'snortsp-3.0.0b3' is dated 2008 and will compile with gcc-4.4.1 or older.

Ubuntu example :
'cd snortsp-3.0.0b3/ && export CC=gcc-4.3 && ./configure && make' EDIT: See #7.

..

hi, thanks for your answer. i'm running xubuntu (ubuntu Ubuntu 10.04.2 LTS) with 2.6.32-30-generic kernel.

I did go and download and install gcc 4.3, but no luck, still throwing errors.

gcc-4.3 -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src/s_util/libsbpf/bpf -I../../src/s_util/libsbpf/net -I../../src/s_util -I../../src/s_util/include -I../../src/data_source -I../../src/data_source/daq -I../../src/data_source/decode -I../../src/data_source/flow -I../../src/platform -I../../src/comms -I../../src/analysis -I../../src/output -I.. -I/usr/include/pcap -I/usr/include/pcap -D_GNU_SOURCE -fno-strict-aliasing -I/usr/include/lua5.1 -Wall -Werror -DBUILDING_SO -g -fno-strict-aliasing -fvisibility=hidden -O2 -DLUA_USE_LINUX -D_GNU_SOURCE -MT libsutil_la-s_daemonize.lo -MD -MP -MF .deps/libsutil_la-s_daemonize.Tpo -c s_daemonize.c -fPIC -DPIC -o .libs/libsutil_la-s_daemonize.o
cc1: warnings being treated as errors
s_daemonize.c: In function 's_create_pid_file':
s_daemonize.c:67: error: ignoring return value of 'ftruncate', declared with attribute warn_unused_result
s_daemonize.c:68: error: ignoring return value of 'write', declared with attribute warn_unused_result
make[4]: *** [libsutil_la-s_daemonize.lo] Error 1
make[4]: Leaving directory `/usr/local/src/snortsp-3.0.0b3/src/s_util'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory `/usr/local/src/snortsp-3.0.0b3/src/s_util'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/local/src/snortsp-3.0.0b3/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/snortsp-3.0.0b3'
make: *** [all] Error 2

OK, Ubuntu 10.04.

Snortsp-3.0.0b3 isn't working with any new Ubuntu compilers, it seems.
( gcc-4.1 , gcc-4.3 , gcc-4.4 )


A different compiler then : "3.4.6"

'cd snortsp-3.0.0b3/ && export CC=gcc-3.4 CXX=g++-3.4 && ./configure && make'

..

its not in USC, and of course it encountered problems when I attempted to install it. I am nearly at my wits end with this distro.

If you mean gcc / g++ version 3.4 /// 'Ubuntu software center' :
Please add 'hardy' to /etc/apt/sources.list :
Then you can do :
sudo apt-get update && sudo apt-get install g++-3.4

..