[Snortsam-discussion] Compiling SnortSam on OpenBSD 4.5

[Frank Knobbe]

On Mon, 2009-09-14 at 21:54 +0100, Simon Slaytor wrote:
> I'm trying to build/install SnortSam 2.6 (tried CVS & tar ball) on 
> OpenBSD 4.5 (AMD64) however I'm having a bit of trouble.
[...]
> I did some googling and I found someone who had built snortsam on 
> OpenBSD 4.4, following the posters details I have added the following to 
> the src/ssp_pf.h file, updated for 4.5 over 4.4.
> 
> #ifdef OpenBSD4_5
> #define USENEWCODE
> #define OpenBSD3_6 OpenBSD3_7
> #endif
> 

Yeah, the pf code needs to be updated and cleaned-up a bit. Any
volunteers to rewrite it so that the constant updating of the version
DEFINE can be removed?

> Now I get the following when trying to compile SnortSam.
> 
> -------------------------------------------------------------------------------
> Building SnortSam (release)
> -------------------------------------------------------------------------------
> ssp_pf2.o(.text+0x0): In function `parse_opts':
> : multiple definition of `parse_opts'
> ssp_pf.o(.text+0x0): first defined here
> snortsam.o(.text+0xada): In function `remspace':
> : warning: strcpy() is almost always misused, please use strlcpy()
> collect2: ld returned 1 exit status

Don't worry about the strcpy warning, it's not misused in remspace :)

As far as the other issues, since you fixed up ssp_pf.c, use only that.
Do not compile ssp_pf.c and ssp_pf2.c at the same time. Choose one. So,
go ahead and remove the ssp_pf2 references from plugins.h. Remove the
include of ssp_pf2.h at the top, and remove the plugin section for pf2
in the list of plugins. Then recompile again. All should be well then.

Regards,
Frank