| 1 |
On 08/23/2015 08:59 AM, Fernando Rodriguez wrote: |
| 2 |
> On Sunday, August 23, 2015 8:27:17 AM Rod wrote: |
| 3 |
>> Snipped out the previous, takes a while to scroll... |
| 4 |
>> |
| 5 |
>> On 08/23/2015 07:40 AM, Fernando Rodriguez wrote: |
| 6 |
>>> Post the output of: emerge -vap snort and then: USE=normalizer emerge |
| 7 |
>>> -vap snort The only way NormFlags is left out (as far as I can see) is |
| 8 |
>>> if you disable that flag (which is enabled by default). |
| 9 |
>> # emerge -pqv '=net-analyzer/snort-2.9.7.5::gentoo' |
| 10 |
>> |
| 11 |
>> [ebuild U ] net-analyzer/snort-2.9.7.5 [2.9.1] USE="threads |
| 12 |
>> -active-response -control-socket% -debug -file-inspect% -flexresp3 -gre |
| 13 |
>> -high-availability% -inline-init-failopen -large-pcap-64bit |
| 14 |
>> -linux-smp-stats -mpls -non-ether-decoders% -normalizer -perfprofiling |
| 15 |
>> -ppm -react -reload-error-restart (-selinux*) -shared-rep% |
| 16 |
>> -side-channel% -sourcefire% -static -targetbased (-aruba%) |
| 17 |
>> (-decoder-preprocessor-rules%) (-dynamicplugin%*) (-mysql%*) (-odbc%*) |
| 18 |
>> (-paf%) (-postgres%*) (-zlib%*)" |
| 19 |
>> |
| 20 |
>> Ahhh, ok, I see it, "-normalizer" |
| 21 |
>> |
| 22 |
>> Maybe on newer install systems its enabled by default, but I have |
| 23 |
>> been running this system with Snort on it for 10 years or so... and I |
| 24 |
>> don't think "normalizer" would be that old in the"USE" flags, opening |
| 25 |
>> `ufed` it doesn't show it as included or enabled, I have enabled it. |
| 26 |
>> |
| 27 |
>> # USE=normalizer emerge -vap snort |
| 28 |
>> |
| 29 |
>> [ebuild U ~] net-analyzer/snort-2.9.7.5::gentoo [2.9.1::gentoo] |
| 30 |
>> USE="normalizer* threads -active-response -control-socket% -debug |
| 31 |
>> -file-inspect% -flexresp3 -gre -high-availability% -inline-init-failopen |
| 32 |
>> -large-pcap-64bit -linux-smp-stats -mpls -non-ether-decoders% |
| 33 |
>> -perfprofiling -ppm -react -reload-error-restart (-selinux*) |
| 34 |
>> -shared-rep% -side-channel% -sourcefire% -static -targetbased (-aruba%) |
| 35 |
>> (-decoder-preprocessor-rules%) (-dynamicplugin%*) (-mysql%*) (-odbc%*) |
| 36 |
>> (-paf%) (-postgres%*) (-zlib%*)" 0 KiB |
| 37 |
>> |
| 38 |
>> No luck I'm afraid |
| 39 |
> grep your package.* in /etc/portage for snort entries. I didn't investigate |
| 40 |
> which one is breaking this time but it must be something you got there |
| 41 |
> somewhere. I just built it with the default use flags and it works. If it was |
| 42 |
> profile changes you would've got them when you sync'd. |
| 43 |
> |
| 44 |
> And don't forget to file a bug. |
| 45 |
|
| 46 |
net-analyzer/snort ~amd64 |
| 47 |
|
| 48 |
# required by net-analyzer/snort-2.9.6.1 |
| 49 |
# required by @selected |
| 50 |
# required by @world (argument) |
| 51 |
=net-libs/daq-2.0.2 ~amd64 |
| 52 |
|
| 53 |
|
| 54 |
|
| 55 |
-- |
| 56 |
--- |
| 57 |
|
| 58 |
Regards, |
| 59 |
|
| 60 |
Rod Smart |
| 61 |
0417 513 286 |
Archives