[cobalt-users] Anyone else had problems with installing Snort 1.7 on Raq 3?

["Dan" <daniel@xxxxxxxxxxxxxxxxxxxxxxxx>]

I finally got Snort 1.6.3 to install on my Raq 3 (I had problems with the
latest Snort 1.7 - see end of message for my last posting on the errors I
was getting) but there is a problem in that the old rulesets for 1.6.3 do
not exist anymore.

Snort has a basic default ruleset file but I'm trying to use the "rules"
database on the site which generates the rules automatically for you and
covers a lot of rules that aren't included in the default file. It states
that they are only for the updated Snort 1.7 and if you click on the
download section you find the rulesets are for 1.7 only.I think the Snort
creators exepect you to upgrade to 1.7 but as I said, it will not install on
my Raq (see below).

My questions are:

Has anyone got the lates Snort to compile/install properly on a Raq3? If so,
how - did you come across the error below?

Does anyone know how to obtain or have the old 1.6.3 comprehensive ruleset?
Believe me I've searched everywhere.

Thanks for any pointers
Dan

Original message:

>I tried to install snort 1.7 today but on the make install command I am
getting
>the following:

gcc -DHAVE_CONFIG_H -I. -I. -I. -I/usr/include/pcap  -I/usr/include/pgsql -D
ENAB
LE_POSTGRESQL -I/usr/include -DENABLE_SSL  -g -O2 -Wall  -c spo_xml.c
spo_xml.c: In function `load_key':
spo_xml.c:655: too many arguments to function `PEM_read_bio_PrivateKey'
spo_xml.c: In function `load_crt':
spo_xml.c:677: too many arguments to function `PEM_read_bio_X509'

I have looked at the installation forum on snort.org and I see a couple of
people have posted the same question but no one has replied. I'm running a
Raq 3 with all updates - anyone else had problems installing Snort 1.7 or
know what this is about? I did a search on Google with a couple of strings
from the above output and it came back with a lot of SSL related
information - is it linked to this perhaps?