Barnyard2-1.13 fails under OpenBSD

[C. L. Martinez]

Hi all,

I am trying to build barnyard2-1.13 under an OpenBSD 5.3 host, but
autogen.sh fails:

root@obsd10:/tmp/barnyard2-stable# ./autogen.sh
Found libtoolize
libtoolize: putting auxiliary files in `.'.
libtoolize: copying file `./ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
libtoolize: copying file `m4/libtool.m4'
libtoolize: copying file `m4/ltoptions.m4'
libtoolize: copying file `m4/ltsugar.m4'
libtoolize: copying file `m4/ltversion.m4'
libtoolize: copying file `m4/lt~obsolete.m4'
autoreconf-2.69: Entering directory `.'
autoreconf-2.69: configure.in: not using Gettext
autoreconf-2.69: running: aclocal --force -I m4
aclocal-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'
configure.in:6: error: 'AM_CONFIG_HEADER': this macro is obsolete.
You should use the 'AC_CONFIG_HEADERS' macro instead.
/usr/local/share/aclocal-1.13/obsolete-err.m4:14: AM_CONFIG_HEADER is
expanded from...
configure.in:6: the top level

autom4te-2.69: /usr/bin/m4 failed with exit status: 1
aclocal-1.13: error: echo failed with exit status: 1
autoreconf-2.69: aclocal failed with exit status: 1
You can now run "./configure" and then "make".

I have exported AUTOCONF_VERSION and AUTOMAKE_VERSION variables:

root@obsd10:/tmp/3/barnyard2-stable# set
AUTOCONF_VERSION=2.69
AUTOMAKE_VERSION=1.13
COLUMNS=203

Any ideas??

[beenph]

Seem's like it does not like


AM_CONFIG_HEADER(config.h) in the file configure.in

Edit it, its right at the top (line 6) and change it for
AM_CONFIG_HEADERS(config.h)

And restest.

-elz

> --
>
> ---
> You received this message because you are subscribed to the Google Groups "barnyard2-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to barnyard2-use...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>

[C. L. Martinez]

On Wed, May 22, 2013 at 2:30 PM, beenph <bee...@gmail.com> wrote:
> Seem's like it does not like
>
>
> AM_CONFIG_HEADER(config.h) in the file configure.in
>
> Edit it, its right at the top (line 6) and change it for
> AM_CONFIG_HEADERS(config.h)
>
> And restest.
>
> -elz
>

Uhmm, nothing:

Found libtoolize
libtoolize: putting auxiliary files in `.'.
libtoolize: copying file `./ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
libtoolize: copying file `m4/libtool.m4'
libtoolize: copying file `m4/ltoptions.m4'
libtoolize: copying file `m4/ltsugar.m4'
libtoolize: copying file `m4/ltversion.m4'
libtoolize: copying file `m4/lt~obsolete.m4'
autoreconf-2.69: Entering directory `.'
autoreconf-2.69: configure.in: not using Gettext
autoreconf-2.69: running: aclocal --force -I m4
aclocal-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'

configure.in:6: warning: macro 'AM_CONFIG_HEADERS' not found in library
autoreconf-2.69: configure.in: tracing
autoreconf-2.69: running: libtoolize --copy --force

libtoolize: putting auxiliary files in `.'.
libtoolize: copying file `./ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
libtoolize: copying file `m4/libtool.m4'
libtoolize: copying file `m4/ltoptions.m4'
libtoolize: copying file `m4/ltsugar.m4'
libtoolize: copying file `m4/ltversion.m4'
libtoolize: copying file `m4/lt~obsolete.m4'

aclocal-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'

configure.in:6: warning: macro 'AM_CONFIG_HEADERS' not found in library
autoreconf-2.69: running: /usr/local/bin/autoconf-2.69 --force
configure.in:6: error: possibly undefined macro: AM_CONFIG_HEADERS
If this token and others are legitimate, please use m4_pattern_allow.
See the Autoconf documentation.
autoreconf-2.69: /usr/local/bin/autoconf-2.69 failed with exit status: 1

[beenph]

You should replace it with,


AC_CONFIG_HEADERS(config.h)

My bad here.

-elz

[C. L. Martinez]

Ok, new output:

Found libtoolize
libtoolize: putting auxiliary files in `.'.
libtoolize: copying file `./ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
libtoolize: copying file `m4/libtool.m4'
libtoolize: copying file `m4/ltoptions.m4'
libtoolize: copying file `m4/ltsugar.m4'
libtoolize: copying file `m4/ltversion.m4'
libtoolize: copying file `m4/lt~obsolete.m4'
autoreconf-2.69: Entering directory `.'
autoreconf-2.69: configure.in: not using Gettext
autoreconf-2.69: running: aclocal --force -I m4
aclocal-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'

autoreconf-2.69: configure.in: tracing
autoreconf-2.69: running: libtoolize --copy --force
libtoolize: putting auxiliary files in `.'.
libtoolize: copying file `./ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
libtoolize: copying file `m4/libtool.m4'
libtoolize: copying file `m4/ltoptions.m4'
libtoolize: copying file `m4/ltsugar.m4'
libtoolize: copying file `m4/ltversion.m4'
libtoolize: copying file `m4/lt~obsolete.m4'
aclocal-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'

autoreconf-2.69: running: /usr/local/bin/autoconf-2.69 --force
autoreconf-2.69: running: /usr/local/bin/autoheader-2.69 --force
autoreconf-2.69: running: automake --add-missing --copy --force-missing
automake-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'
configure.in:7: warning: AM_INIT_AUTOMAKE: two- and three-arguments
forms are deprecated. For more info, see:
configure.in:7:
http://www.gnu.org/software/automake/manual/automake.html#Modernize-AM_INIT_AUTOMAKE-invocation
configure.in:11: installing './config.guess'
configure.in:11: installing './config.sub'
configure.in:7: installing './install-sh'
configure.in:7: installing './missing'
Makefile.am:8: warning: 'INCLUDES' is the old name for 'AM_CPPFLAGS'
(or '*_CPPFLAGS')
configure.in:1098: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
configure.in:1098: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
configure.in:1098: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
configure.in:1098: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
configure.in:1098: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
src/Makefile.am:37: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
automake-1.13: warning: autoconf input should be named 'configure.ac',
not 'configure.in'
src/input-plugins/Makefile.am:8: warning: 'INCLUDES' is the old name
for 'AM_CPPFLAGS' (or '*_CPPFLAGS')
src/output-plugins/Makefile.am:28: warning: 'INCLUDES' is the old name
for 'AM_CPPFLAGS' (or '*_CPPFLAGS')
src/sfutil/Makefile.am:18: warning: 'INCLUDES' is the old name for
'AM_CPPFLAGS' (or '*_CPPFLAGS')
autoreconf-2.69: Leaving directory `.'

You can now run "./configure" and then "make".

.. and it seems ok, but when I try to compile:


make all-recursive
Making all in src
Making all in sfutil
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c getopt_long.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sfmemcap.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sfprimetable.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sfxhash.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sf_ip.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sf_iph.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sf_ipvar.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sf_textlog.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I/data/soft/libpcap/include
-DSUP_IP6 -DGRE -DMPLS -I/usr/local/include/tcl8.5 -DENABLE_TCL -g
-O2 -fno-strict-aliasing -Wall -c sf_vartable.c
rm -f libsfutil.a
ar cru libsfutil.a getopt_long.o sfmemcap.o sfprimetable.o sfxhash.o
sf_ip.o sf_iph.o sf_ipvar.o sf_textlog.o sf_vartable.o
ranlib libsfutil.a
Making all in output-plugins
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_arubaaction.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_bro.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_cef.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_csv.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_fast.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_full.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_fwsam.c
spo_alert_fwsam.c: In function 'AlertFWsam':
spo_alert_fwsam.c:1050: warning: comparison between pointer and integer
spo_alert_fwsam.c:1050: warning: comparison between pointer and integer
spo_alert_fwsam.c:1058: warning: comparison between pointer and integer
spo_alert_fwsam.c:1059: warning: comparison between pointer and integer
spo_alert_fwsam.c:1076: warning: assignment makes integer from pointer
without a cast
spo_alert_fwsam.c:1077: warning: assignment makes integer from pointer
without a cast
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_prelude.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_syslog.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_test.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_alert_unixsock.c
spo_alert_unixsock.c: In function 'OpenAlertSock':
spo_alert_unixsock.c:293: warning: array size (104) smaller than bound
length (108)
spo_alert_unixsock.c:293: warning: array size (104) smaller than bound
length (108)
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_common.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_log_ascii.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_log_null.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_log_tcpdump.c
spo_log_tcpdump.c:601:26: warning: no newline at end of file
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_platypus.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_sguil.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil
-I/data/soft/libpcap/include -DSUP_IP6 -DGRE -DMPLS
-I/usr/local/include/tcl8.5 -DENABLE_TCL -g -O2 -fno-strict-aliasing
-Wall -c spo_syslog_full.c
spo_syslog_full.c: In function 'Syslog_FormatIPHeaderAlert':
spo_syslog_full.c:499: error: incompatible type for argument 1 of 'sfip_to_str'
spo_syslog_full.c:502: error: incompatible type for argument 1 of 'sfip_to_str'
*** Error 1 in src/output-plugins (Makefile:350 'spo_syslog_full.o')
*** Error 1 in src (Makefile:482 'all-recursive')
*** Error 1 in . (Makefile:398 'all-recursive')
*** Error 1 in /tmp/m/barnyard2-stable (Makefile:303 'all')

My configure options:

./configure --prefix=/data/soft/barnyard2
--with-libpcap-includes=/data/soft/libpcap/include
--with-libpcap-libraries=/data/soft/libpcap/lib
--with-tcl=/usr/local/lib/tcl/tcl8.5 --enable-ipv6 --enable-gre
--enable-mpls

[beenph]

Do a make clean

and you do not need to include any of the other options you included
except your prefix.

[C. L. Martinez]

On Wed, May 22, 2013 at 2:57 PM, beenph <bee...@gmail.com> wrote:
> Do a make clean
>
> and you do not need to include any of the other options you included
> except your prefix.
>
>
>

Ok, works. Many thanks beenph.

[C. L. Martinez]

Buff ... Compiled, but some problems:

spo_syslog_full config:
Detail Level: Fast
Syslog Server: 127.0.0.1:10514
Reporting Protocol: tcp
Checking PID path...
PID path stat checked out ok, PID path set to /var/run/
Writing PID "26247" to file "/var/run//barnyard2_em53.pid"
sguil: sensor name = idpsuricata02
sguil: agent port = 11557
sguil: Connected to localhost on 11557.

--== Initialization Complete ==--

______ -*> Barnyard2 <*-
/ ,,_ \ Version 2.1.13 (Build 327) TCL
|o" )~| By Ian Firns (SecurixLive): http://www.securixlive.com/
+ '''' + (C) Copyright 2008-2013 Ian Firns <fir...@securixlive.com>

WARNING: Ignoring corrupt/truncated waldofile
'/nsm/sensor_data/idpsuricata02/barnyard2.waldo'
Opened spool file '/nsm/sensor_data/idpsuricata02/unified2.alert.1369290557'
Waiting for new data
NetTestSocket():: Connection reset by peer
NetTestSocket():: Connection reset by peer
^C*** Caught Int-Signal
Barnyard2 exiting
barnyard2 in free(): error: bogus pointer (double free?) 0x14b4629a6000
Abort trap (core dumped)
root@nsm10:/data/config/etc/sguil#

[beenph]

The patch has not been yet upstreamed.

This is why, its due to a double call to cleanup functions.

You can apply the following patch to the source to get it running
without a itch.

Enjoy.
-elz

[Stan Gammons]

I've been trying to get Barnyard2 to work on OpenBSD 5.4 too but sguil 0.8.0 complains about Barnyard2 not being compiled with TCL support.  When I enable TCL support and try to compile I get the following error.  Looks like one of the problems is it's unable to find tcl.h  

Anyone know how to fix this?

make

make  all-recursive
Making all in src
Making all in sfutil

gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c getopt_long.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sfmemcap.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sfprimetable.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sfxhash.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sf_ip.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sf_iph.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sf_ipvar.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sf_textlog.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c sf_vartable.c

rm -f libsfutil.a
ar cru libsfutil.a getopt_long.o sfmemcap.o  sfprimetable.o sfxhash.o sf_ip.o  sf_iph.o sf_ipvar.o sf_textlog.o  sf_vartable.o
ranlib libsfutil.a
Making all in output-plugins

gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_arubaaction.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_bro.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_cef.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_csv.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_fast.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_full.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_fwsam.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_prelude.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_syslog.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_test.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_unixsock.c
spo_alert_unixsock.c: In function 'OpenAlertSock':
spo_alert_unixsock.c:361: warning: array size (104) smaller than bound length (108)
spo_alert_unixsock.c:361: warning: array size (104) smaller than bound length (108)
spo_alert_unixsock.c: In function 'AlertUnixSockCleanExit':
spo_alert_unixsock.c:385: warning: implicit declaration of function 'free'
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_common.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_log_ascii.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_log_null.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_log_tcpdump.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6 -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_sguil.c
spo_sguil.c:67:17: error: tcl.h: No such file or directory
spo_sguil.c:120: error: expected ')' before '*' token
spo_sguil.c:121: error: expected ')' before '*' token
spo_sguil.c:122: error: expected ')' before '*' token
spo_sguil.c:123: error: expected ')' before '*' token
spo_sguil.c:124: error: expected ')' before '*' token
spo_sguil.c:125: error: expected ')' before '*' token
spo_sguil.c: In function 'Sguil':
spo_sguil.c:237: error: 'Tcl_DString' undeclared (first use in this function)
spo_sguil.c:237: error: (Each undeclared identifier is reported only once
spo_sguil.c:237: error: for each function it appears in.)
spo_sguil.c:237: error: expected ';' before 'list'
spo_sguil.c:297: warning: implicit declaration of function 'Tcl_DStringInit'
spo_sguil.c:297: error: 'list' undeclared (first use in this function)
spo_sguil.c:300: warning: implicit declaration of function 'Tcl_DStringAppendElement'
spo_sguil.c:374: warning: implicit declaration of function 'SguilAppendIPHdrData'
spo_sguil.c:382: warning: implicit declaration of function 'SguilAppendICMPData'
spo_sguil.c:386: warning: implicit declaration of function 'SguilAppendTCPData'
spo_sguil.c:390: warning: implicit declaration of function 'SguilAppendUDPData'
spo_sguil.c:415: warning: implicit declaration of function 'SguilAppendPayloadData'
spo_sguil.c:424: warning: implicit declaration of function 'SguilAppendIPHdrDataEVT'
spo_sguil.c:438: warning: implicit declaration of function 'Tcl_DStringValue'
spo_sguil.c:438: warning: passing argument 2 of 'SguilRTEventMsg' makes pointer from integer without a cast
spo_sguil.c:442: warning: implicit declaration of function 'Tcl_DStringFree'
spo_sguil.c: At top level:
spo_sguil.c:611: error: expected ')' before '*' token
spo_sguil.c:657: error: expected ')' before '*' token
spo_sguil.c:730: error: expected ')' before '*' token
spo_sguil.c:800: error: expected ')' before '*' token
spo_sguil.c:867: error: expected ')' before '*' token
spo_sguil.c:921: error: expected ')' before '*' token
*** Error 1 in src/output-plugins (Makefile:350 'spo_sguil.o')

*** Error 1 in src (Makefile:482 'all-recursive')
*** Error 1 in . (Makefile:398 'all-recursive')

*** Error 1 in /usr/src/barnyard2-master (Makefile:303 'all')

[beenph]

On Sat, Dec 14, 2013 at 3:11 PM, Stan Gammons <sg06...@gmail.com> wrote:
>
> I've been trying to get Barnyard2 to work on OpenBSD 5.4 too but sguil 0.8.0
> complains about Barnyard2 not being compiled with TCL support. When I
> enable TCL support and try to compile I get the following error. Looks like
> one of the problems is it's unable to find tcl.h
>
> Anyone know how to fix this?
>

Did you install obsd tcl port?
Is your tcl.h file located in /usr/local/include/tcl8.6?

[Stan Gammons]

Did you install obsd tcl port?

No.  I built Tcl version 8.6.1 from source.
 

Is your tcl.h file located in /usr/local/include/tcl8.6?

No, it's in /usr/local/include

[beenph]

Then you might want to check how you installed tcl, seem's like by
default it would
install it self (includes) in $PATH/include/tcl$VERSION$

You should have got that message:

Can't find Tcl libraries. Use --with-tcl to specify
the directory containing tclConfig.sh on your system.
Continuing build without Tcl support.])


so is tclConfig.sh found in your /usr/local/include?

If not locate on your system where the file is located and re-run

configure with --with-tcl=PATH_WHERE_tclConfig.sh is found.

-elz

[Stan Gammons]

On Saturday, December 14, 2013 4:30:34 PM UTC-6, Eric Lauzon wrote:

Then you might want to check how you installed tcl, seem's  like by
default it would
install it self (includes) in $PATH/include/tcl$VERSION$

You should have got that message:

 Can't find Tcl libraries.  Use --with-tcl to specify
        the directory containing tclConfig.sh on your system.
        Continuing build without Tcl support.])


so is tclConfig.sh found in your /usr/local/include?

If not locate on your system where the file is located and re-run

configure with --with-tcl=PATH_WHERE_tclConfig.sh is found.

tclConfig.sh is in /usr/local/lib

I'll see what re-installing tcl does.


Stan

[beenph]

Ok but according to my previous e-mail,

your barnyard2 configure line should look like:

./configure --with-tcl=/usr/local/lib etcc.....
it should then be fine, you probably didin't include a path for the
--with-tcl argument which is why you where getting an error.

[Stan Gammons]

On Saturday, December 14, 2013 5:54:31 PM UTC-6, Eric Lauzon wrote:

Ok but according to my previous e-mail,

your barnyard2 configure line should look like:

./configure --with-tcl=/usr/local/lib etcc.....
it should then be fine, you probably didin't include a path for the
--with-tcl argument which is why you where getting an error.

That didn't help.

 ./configure --with-tcl=/usr/local/lib --prefix=/usr/local
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... ./install-sh -c -d
checking for gawk... no
checking for mawk... no
checking for nawk... no
checking for awk... awk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking build system type... x86_64-unknown-openbsd5.4
checking host system type... x86_64-unknown-openbsd5.4
checking how to print strings... print -r
checking for style of include used by make... GNU
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... none
checking for a sed that does not truncate output... /usr/bin/sed
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for fgrep... /usr/bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 196608
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... no
checking how to convert x86_64-unknown-openbsd5.4 file names to x86_64-unknown-openbsd5.4 format... func_convert_file_noop
checking how to convert x86_64-unknown-openbsd5.4 file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$
checking for dlltool... no
checking how to associate runtime and link libraries... print -r --
checking for ar... ar
checking for archiver @FILE support... no
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ok
checking for sysroot... no
checking for mt... mt
checking if mt is a manifest tool... no
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... yes
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes
checking whether -lc should be explicitly linked in... yes
checking dynamic linker characteristics... openbsd5.4 ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking for gcc option to accept ISO C99... -std=gnu99
checking for gcc -std=gnu99 option to accept ISO Standard C... (cached) -std=gnu99
checking for gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ISO C89... (cached) none needed
checking dependency style of gcc... (cached) none
checking whether byte ordering is bigendian... no
checking for bison... bison
checking for flex... flex
checking for strings.h... (cached) yes
checking for string.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for unistd.h... (cached) yes
checking sys/sockio.h usability... yes
checking sys/sockio.h presence... yes
checking for sys/sockio.h... yes
checking paths.h usability... yes
checking paths.h presence... yes
checking for paths.h... yes
checking for inttypes.h... (cached) yes
checking wchar.h usability... yes
checking wchar.h presence... yes
checking for wchar.h... yes
checking math.h usability... yes
checking math.h presence... yes
checking for math.h... yes
checking for floor in -lm... yes
checking for ceil in -lm... yes
checking for inet_ntoa in -lnsl... no
checking for socket in -lsocket... no
checking whether printf must be declared... no
checking whether fprintf must be declared... no
checking whether syslog must be declared... no
checking whether puts must be declared... no
checking whether fputs must be declared... no
checking whether fputc must be declared... no
checking whether fopen must be declared... no
checking whether fclose must be declared... no
checking whether fwrite must be declared... no
checking whether fflush must be declared... no
checking whether getopt must be declared... no
checking whether bzero must be declared... no
checking whether bcopy must be declared... no
checking whether memset must be declared... no
checking whether strtol must be declared... no
checking whether strcasecmp must be declared... no
checking whether strncasecmp must be declared... no
checking whether strerror must be declared... no
checking whether perror must be declared... no
checking whether socket must be declared... no
checking whether sendto must be declared... no
checking whether vsnprintf must be declared... no
checking whether snprintf must be declared... no
checking whether strtoul must be declared... no
checking for snprintf... yes
checking for strlcpy... yes
checking for strlcat... yes
checking for strerror... yes
checking for vswprintf... yes
checking for wprintf... yes
checking size of char... 1
checking size of short... 2
checking size of int... 4
checking size of long int... 8
checking size of long long int... 8
checking size of unsigned int... 4
checking size of unsigned long int... 8
checking size of unsigned long long int... 8
checking for u_int8_t... yes
checking for u_int16_t... yes
checking for u_int32_t... yes
checking for u_int64_t... yes
checking for uint8_t... yes
checking for uint16_t... yes
checking for uint32_t... yes
checking for uint64_t... yes
checking for int8_t... yes
checking for int16_t... yes
checking for int32_t... yes
checking for int64_t... yes
checking for INADDR_NONE... yes
checking for __FUNCTION__... yes
checking pcap.h usability... yes
checking pcap.h presence... yes
checking for pcap.h... yes
checking for pcap_datalink in -lpcap... yes
checking for sparc... no
checking for the tcl version number... 8.6, patchlevel .1
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating src/sfutil/Makefile
config.status: creating src/input-plugins/Makefile
config.status: creating src/output-plugins/Makefile
config.status: creating etc/Makefile
config.status: creating doc/Makefile
config.status: creating rpm/Makefile
config.status: creating schemas/Makefile
config.status: creating m4/Makefile
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands
#

# make

make  all-recursive
Making all in src
Making all in sfutil
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c getopt_long.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sfmemcap.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sfprimetable.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sfxhash.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sf_ip.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sf_iph.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sf_ipvar.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sf_textlog.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I..   -I/usr/local/include/tcl8.6 -DENABLE_TCL                 -g -O2 -fno-strict-aliasing -Wall -c sf_vartable.c
rm -f libsfutil.a

ar cru libsfutil.a getopt_long.o sfmemcap.o  sfprimetable.o sfxhash.o sf_ip.o  s               f_iph.o sf_ipvar.o sf_textlog.o  sf_vartable.o

ranlib libsfutil.a
Making all in output-plugins
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_arubaaction.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_bro.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_cef.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_csv.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_fast.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_full.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_fwsam.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_prelude.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_syslog.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_test.c
gcc -DHAVE_CONFIG_H -I. -I../.. -I.. -I ../sfutil   -I/usr/local/include/tcl8.6                -DENABLE_TCL  -g -O2 -fno-strict-aliasing -Wall -c spo_alert_unixsock.c
spo_alert_unixsock.c: In function 'OpenAlertSock':
spo_alert_unixsock.c:361: warning: array size (104) smaller than bound length (1               08)
spo_alert_unixsock.c:361: warning: array size (104) smaller than bound length (1               08)

#

[beenph]

For some reason its still looking in /usr/local/include/tcl8.6

Make a symlink of that directory to /usr/local/include

[Stan Gammons]

On Sunday, December 15, 2013 9:34:28 AM UTC-6, Eric Lauzon wrote:

For some reason its still looking in  /usr/local/include/tcl8.6

Make a symlink of that directory to /usr/local/include

I don't have a tcl8.6 directory in /usr/local/include

I did the following, and it "seems" to have fixed the problem.  It finishes compiling without errors anyway.

mkdir /usr/local/include/tcl8.6

cd /usr/local/include/tcl8.6

ln -s /usr/local/include/tcl.h /usr/local/include/tcl8.6/tcl.h

ln -s /usr/local/include/tclDecls.h /usr/local/include/tcl8.6/tclDecls.h

ln -s /usr/local/include/tclPlatDecls.h /usr/local/include/tcl8.6/tclPlatDecls.h

Now to see if it works...

Thanks for the help!


Stan