Thanks Daniel. It's failing here now: make[2]: Leaving directory `/home/jlee/ossec-hids-101203/src/analysisd/compiled_rules' gcc -g -Wall -I../ -I../headers -DDEFAULTDIR=\"/var/ossec\" -DCLIENT -DUSE_OPENSSL -DARGV0=\"ossec-analysisd\" -DXML_VAR=\"var\" -DOSSECHIDS -I./ analysisd.c stats.c lists.c lists_list.c rules.c rules_list.c config.c fts.c dodiff.c eventinfo.c eventinfo_list.c cleanevent.c active-response.c picviz.c prelude.c compiled_rules/*.o ../config/lib_config.a decoders/decoders.a cdb/cdb.a cdb/cdb_make.a alerts/alerts.a ../os_xml/os_xml.a ../os_regex/os_regex.a ../os_net/os_net.a ../shared/lib_shared.a ../os_zlib/os_zlib.c ../external/libz.a -o ossec-analysisd lists.c: In function `Lists_OP_LoadList': lists.c:37: parse error before `char' lists.c:38: `b_filename' undeclared (first use in this function) lists.c:38: (Each undeclared identifier is reported only once lists.c:38: for each function it appears in.) lists.c:40: parse error before `*' lists.c:41: `tmp_listnode_pt' undeclared (first use in this function) make[1]: *** [logaudit] Error 1 make[1]: Leaving directory `/home/jlee/ossec-hids-101203/src/analysisd'
Error Making analysisd make: *** [all] Error 1 Error 0x5. Building error. Unable to finish the installation. I'm guessing this is going to keep happening. Do you want me to take it offline and email you directly so that I'm not flooding this thread? Thanks, Jeremy On Fri, Dec 3, 2010 at 9:12 AM, Daniel Cid <[email protected]> wrote: > Thanks for testing it for us. Fixed on today's snapshot: > > http://www.ossec.net/files/snapshots/ > > thanks, > > On Fri, Dec 3, 2010 at 12:22 PM, jplee3 <[email protected]> wrote: > > Thanks Daniel! I tried it but it's failing elsewhere now (this time in > > analysisd it seems): > > > > *** Making analysisd *** > > > > make[1]: Entering directory `/home/jlee/ossec-hids-101202/src/ > > analysisd' > > cd ./cdb; make > > make[2]: Entering directory `/home/jlee/ossec-hids-101202/src/ > > analysisd/cdb' > > gcc -I../ -g -Wall -I../../ -I../../headers -DDEFAULTDIR=\"/var/ossec > > \" -DCLIENT -DUSE_OPENSSL -DARGV0=\"cdb\" -DXML_VAR=\"var\" - > > DOSSECHIDS -c cdb.c cdb_hash.c cdb_make.c uint32_pack.c > > uint32_unpack.c > > ar cru cdb.a cdb.o cdb_hash.o cdb_make.o uint32_pack.o uint32_unpack.o > > ar cru cdb_make.a cdb.o cdb_hash.o cdb_make.o uint32_pack.o > > uint32_unpack.o > > ranlib cdb.a > > ranlib cdb_make.a > > make[2]: Leaving directory `/home/jlee/ossec-hids-101202/src/analysisd/ > > cdb' > > cd ./alerts; make > > make[2]: Entering directory `/home/jlee/ossec-hids-101202/src/ > > analysisd/alerts' > > gcc -I../ -g -Wall -I../../ -I../../headers -DDEFAULTDIR=\"/var/ossec > > \" -DCLIENT -DUSE_OPENSSL -DARGV0=\"alerts\" -DXML_VAR=\"var\" - > > DOSSECHIDS -c mail.c log.c exec.c getloglocation.c > > ar cru alerts.a mail.o log.o exec.o getloglocation.o > > ranlib alerts.a > > make[2]: Leaving directory `/home/jlee/ossec-hids-101202/src/analysisd/ > > alerts' > > cd ./decoders; make > > make[2]: Entering directory `/home/jlee/ossec-hids-101202/src/ > > analysisd/decoders' > > cd plugins; make; > > make[3]: Entering directory `/home/jlee/ossec-hids-101202/src/ > > analysisd/decoders/plugins' > > gcc -g -Wall -I../../../ -I../../../headers -DDEFAULTDIR=\"/var/ossec > > \" -DCLIENT -DUSE_OPENSSL -DARGV0=\"ossec-analysisd\" -DXML_VAR= > > \"var\" -DOSSECHIDS -I../../ -c *.c > > make[3]: Leaving directory `/home/jlee/ossec-hids-101202/src/analysisd/ > > decoders/plugins' > > gcc -g -Wall -I../../ -I../../headers -DDEFAULTDIR=\"/var/ossec\" - > > DCLIENT -DUSE_OPENSSL -DARGV0=\"ossec-analysisd\" -DXML_VAR=\"var > > \" -DOSSECHIDS -I../ -c *.c > > decode-xml.c: In function `ReadDecodeXML': > > decode-xml.c:199: parse error before `xml' > > decode-xml.c:224: `i' undeclared (first use in this function) > > decode-xml.c:224: (Each undeclared identifier is reported only once > > decode-xml.c:224: for each function it appears in.) > > decode-xml.c:224: `xml' undeclared (first use in this function) > > decode-xml.c:245: `node' undeclared (first use in this function) > > decode-xml.c:259: `NULL_Decoder_tmp' undeclared (first use in this > > function) > > decode-xml.c:281: `xml_decoder' undeclared (first use in this > > function) > > decode-xml.c:291: `xml_decoder_name' undeclared (first use in this > > function) > > decode-xml.c:301: `xml_decoder_status' undeclared (first use in this > > function) > > decode-xml.c:382: `xml_parent' undeclared (first use in this function) > > decode-xml.c:388: `xml_regex' undeclared (first use in this function) > > decode-xml.c:421: `xml_prematch' undeclared (first use in this > > function) > > decode-xml.c:453: `xml_program_name' undeclared (first use in this > > function) > > decode-xml.c:459: `xml_ftscomment' undeclared (first use in this > > function) > > decode-xml.c:463: `xml_usename' undeclared (first use in this > > function) > > decode-xml.c:469: `xml_plugindecoder' undeclared (first use in this > > function) > > decode-xml.c:497: `xml_type' undeclared (first use in this function) > > decode-xml.c:524: `xml_order' undeclared (first use in this function) > > decode-xml.c:624: `xml_fts' undeclared (first use in this function) > > make[2]: *** [dc] Error 1 > > make[2]: Leaving directory `/home/jlee/ossec-hids-101202/src/analysisd/ > > decoders' > > make[1]: *** [logaudit] Error 2 > > make[1]: Leaving directory `/home/jlee/ossec-hids-101202/src/ > > analysisd' > > > > Error Making analysisd > > make: *** [all] Error 1 > > > > Error 0x5. > > Building error. Unable to finish the installation. > > > > > > > > > > > > Thanks, > > Jeremy > > > > On Dec 2, 4:35 pm, Daniel Cid <[email protected]> wrote: > >> Oops, fixed on the latest snapshot: > >> > >> http://www.ossec.net/files/snapshots/ > >> > >> Thanks, > >> > >> On Wed, Dec 1, 2010 at 1:54 PM, jplee3 <[email protected]> wrote: > >> > Yep, same thing with the 11-25 snapshot: > >> > >> > *** Making shared *** > >> > >> > make[1]: Entering directory `/home/jlee/ossec-hids-101125/src/shared' > >> > gcc -c -g -Wall -I../ -I../headers -DDEFAULTDIR=\"/var/ossec\" - > >> > DCLIENT -DUSE_OPENSSL -DARGV0=\"shared-libs\" -DXML_VAR=\"var\" - > >> > DOSSECHIDS *.c > >> > read-alert.c: In function `GetAlertData': > >> > read-alert.c:144: parse error before `char' > >> > read-alert.c:145: `m' undeclared (first use in this function) > >> > read-alert.c:145: (Each undeclared identifier is reported only once > >> > read-alert.c:145: for each function it appears in.) > >> > read-alert.c:150: parse error before `int' > >> > read-alert.c:151: `z' undeclared (first use in this function) > >> > make[1]: *** [shared] Error 1 > >> > make[1]: Leaving directory `/home/jlee/ossec-hids-101125/src/shared' > >> > >> > Error Making shared > >> > make: *** [all] Error 1 > >> > >> > Error 0x5. > >> > Building error. Unable to finish the installation. > >> > >> > This is under kernel version 2.4.20-27.7 > >> > >> > On Nov 24, 11:29 pm, Md Monk <[email protected]> wrote: > >> >> Repent! Repent, and not use Red Hat 7.x! > >> > >> >> Lol! Just kidding, and having a bit of fun. My bad. :) > >> > >> >> -Chuck > >> > >> >> Sent from my iPwn > >> > >> >> On Nov 24, 2010, at 7:40 PM, Michael Starks < > [email protected]> wrote: > >> > >> >> > On 11/24/2010 04:35 PM, Justin Mitchell wrote: > >> >> >> I had ossec 2.4.1 installed on three servers (redhat 7.1, redhat > 7.2, > >> >> >> and centos 4.8). I ran the update on all three servers, and only > had > >> >> >> success with the centos 4.8 server. On the two redhat 7.x servers, > it > >> >> >> failed with the following error: > >> > >> >> > OSSEC is punishing you for using Red Hat 7.x. :) > >> > >> >> > -- > >> >> > Michael Starks > >> >> > [I] Immutable Security > >> >> >http://www.immutablesecurity.com >
