net-analyzer/snort-2.9.0.5 has been in portage for quite a while now and I have just submitted a version bump to go to 2.9.1. We should stabilize snort-2.9.0.5 for at least x86 and amd64. Reproducible: Always
@jason: I simply do: amd64box ~ # cp /etc/snort/snort.conf.distrib /etc/snort/snort.conf but it fails to start: amd64box ~ # /etc/init.d/snort start snort | * Starting snort ... snort | * ERROR: snort failed to start Tell me/us if there are other to do.
you have to tailor the config file to get it to work. Simply adding the following to snort.conf might be enough to get it to run: config daq: pcap config daq_mode: passive config daq_dir: /usr/lib64/daq I believe that is mentioned in the post install message. you also will need to check that IFACE is set to an interface on your system.
sorry IFACE is a variable in the conf.d file.
amd64 ok take a look at bug 382865 and bug 382863. They are not a block.
amd64: pass
+ 21 Sep 2011; Tony Vroon <chainsaw@gentoo.org> snort-2.9.0.5.ebuild: + Marked stable on AMD64 based on arch testing by Agostino "ago" Sarubbo & + Elijah "Armageddon" El Lazkani in bug #382857.
Created attachment 289905 [details] snort.report The following keyword changes were necessary to proceed: #required by net-analyzer/snort-2.9.0.5[prelude] >=dev-libs/libprelude-1.0.0-r1 ~x86
(In reply to comment #7) > Created attachment 289905 [details] > snort.report > > The following keyword changes were necessary to proceed: > #required by net-analyzer/snort-2.9.0.5[prelude] > >=dev-libs/libprelude-1.0.0-r1 ~x86 Also fails with the static use flag. compile test only on x86
I've removed a lot of the older ebuilds and made 2.9.1 stable on x86/amd64. ppc, ppc64, will have to mark 2.9.0.5 or later as stable, and arm/sparc will need to re-keyword.
