Bug 91820

Summary:	snort prelude patch outdated (broken)
Product:	Gentoo Linux	Reporter:	dago <dago158>
Component:	New packages	Assignee:	Gentoo Netmon project <netmon>
Status:	RESOLVED TEST-REQUEST
Severity:	normal	CC:	alexander, yoann
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Patch to snort-2.3.3.ebuild

Description dago 2005-05-07 10:56:09 UTC

Prelude updated its library to 0.9 and that broke support for the patch referenced in snort ebuild.

Moreover, the prelude project stopped producing patches and managed to get prelude plugin in the CVS for 2.4.



Reproducible: Always
Steps to Reproduce:

Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-05-07 11:19:46 UTC

Not a security issue, reassigning to maintainers.

Comment 2 Yoann Vandoorselaere 2005-05-08 00:12:50 UTC

We distribute patched Snort 2.3.2 on prelude-ids.org. 
A patch has been contributed on the mailing list for Snort 2.3.3. 
Vanilla Snort 2.4 will include the Prelude patch.

Comment 3 dago 2005-05-08 00:29:17 UTC

In the meantime, why don't you publish the patch on preludes-ids.org ?
(or point me to it, I searched for it).

It may be a detail, but snort+prelude is now broken

Comment 4 Yoann Vandoorselaere 2005-05-08 00:44:17 UTC

Snort+Prelude patch is old and deprecated.

Snort 2.3.2 with Prelude support included:
http://www.prelude-ids.org/download/releases/snort-2.3.2-0.9.0-rc1.tar.gz

Patch for Snort 2.3.3:
http://prelude-ids.org/pipermail/prelude-devel/2005-May/000697.html

Comment 5 dago 2005-05-08 01:09:48 UTC

Created attachment 58323 [details, diff]
Patch to snort-2.3.3.ebuild

quickly edited the ebuild to grep the actual patch from the mailing list and
require libprelude 0.9.0_rc2

compiles & runs, not tested with prelude-manager yet

Comment 6 Marcelo Goes (RETIRED) gentoo-dev

2005-05-08 10:47:57 UTC

Ok,

=snort-2.3.3-r1 and =snort-2.4.20050508 ebuilds
are now in CVS. Both depend on >=libprelude-0.9.0_rc1. snort-2.3.3-r1 uses that patch from the mailing list and snort-2.4.20050508 is a cvs snapshot of snort-2.4.

Since I expect things like patches for other stuff to break/malfunction, I am adding both new ebuilds to package.mask.

Please tell if they work OK.

Comment 7 Marcelo Goes (RETIRED) gentoo-dev

2005-05-08 10:59:00 UTC

While files don't hit the mirrors, you can fetch them from my devspace.

http://dev.gentoo.org/~vanquirius/files/snort-2.3.3-prelude-0.9.0_rc1.diff.bz2
http://dev.gentoo.org/~vanquirius/files/snort-2.4.20050508.tar.gz

Comment 8 Jakub Moc (RETIRED) gentoo-dev

2005-05-09 13:32:51 UTC

*** Bug 92042 has been marked as a duplicate of this bug. ***