[Snort-users] Barnyard 0.1.0 and the "unable to find mysqlclient library" issue

permalink · #1 (**permalink**) 12-30-2003

This is a multi-part message in MIME format.

------=_NextPart_000_0036_01C3C505.74F4BB50
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Configuration:

Mandrake 9.1 (vanilla install, no kernel hacks, no other packages installed
except flex, bison, and snort)
MySQL 12.22 Distrib 4.0.17 for pc-linux (latest version as of 17Dec03),
installed to /usr/local/mysql
Barnyard 0.1.0 (from snort.org, again as of 17Dec03)

Barnyard.conf: straight out of barnyard-0.1.0.tar.gz, with the last two
lines uncommented. File copied to /etc/barnyard.conf

----Scenario 1----

Straight out of the box:

../configure
(no errors)
make && make install
(no errors)
barnyard -c /etc/barnyard.conf
WARNING /etc/barnyard.conf(155) => Unknown output plugin "alert_acid_db"
referenced, ignoring!
WARNING /etc/barnyard.conf(156) => Unknown output plugin "log_acid_db"
referenced, ignoring!

---Scenario 2---
Following Jeff Nathan's advice (from message 10 Oct 03 -
http://archives.neohapsis.com/archiv...10/0239.html):

Edit configure.in (line 285) from:
AC_CHECK_LIB(mysqlclient, mysql_connect, FOUND=yes, FOUND=no)
changed to:
AC_CHECK_LIB(mysqlclient, mysql_real_connect, FOUND=yes, FOUND=no)

#aclocal
#autoheader
configure.in:30: warning: AC_TRY_RUN called without default to allow cross
compiling
#automake
#autoconf
configure.in:30: warning: AC_TRY_RUN called without default to allow cross
compiling

# ./configure --enable-mysql --with-mysql-includes=/usr/local/mysql/include
--with-mysql-libraries=/usr/local/mysql/lib
loading cache ./config.cache
checking for a BSD compatible install... (cached) /usr/bin/install -c
checking whether build environment is sane... yes
...
[snip]
...
checking for /usr/local/mysql/include/mysql.h... yes
checking for mysql_real_connect in -lmysqlclient... no

**********************************************
ERROR: unable to find mysqlclient library
checked in the following places
/usr/local/mysql/lib
**********************************************
--end scenarios--

What are the steps I should be following here to make this work? Obviously
I'm missing something, but after nearly 10 hours of searching the archives
and the rest of tthe web for cryptic references, and trying every trick I
can think of with config.in, configure, and the makefiles, I'm stumped.

Please walk me through the steps, and please use small words, since I'm
getting dumber with each passing hour.

Thank you,

John Whitson

------=_NextPart_000_0036_01C3C505.74F4BB50
Content-Type: text/html;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1276" name=3DGENERATOR></HEAD>
<BODY>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2>Configuration:</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>Mandrake 9.1=20
(vanilla install, no kernel hacks, no other packages installed except =
flex,=20
bison, and snort)</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>MySQL =
12.22 Distrib=20
4.0.17 for pc-linux (latest version as of 17Dec03), installed to=20
/usr/local/mysql</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>Barnyard 0.1.0 (from=20
snort.org, again as of 17Dec03)</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>Barnyard.conf: =20
straight out of barnyard-0.1.0.tar.gz, with the last two lines=20
uncommented.  File copied to /etc/barnyard.conf</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>----Scenario=20
1----</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>Straight out of the=20
box:</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2>./configure</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>   =20
(no errors)</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>make =
&& make=20
install</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>   =20
(no errors)</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>barnyard -c=20
/etc/barnyard.conf</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003>    <FONT =
face=3DArial=20
size=3D2>WARNING /etc/barnyard.conf(155) =3D> Unknown output plugin=20
"alert_acid_db" referenced, ignoring!</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003>    <FONT =
face=3DArial=20
size=3D2>WARNING /etc/barnyard.conf(156) =3D> Unknown output plugin =
"log_acid_db"=20
referenced, ignoring!</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>---Scenario=20
2---</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>Following Jeff=20
Nathan's advice (from message 10 Oct 03 - <A=20
href=3D"http://archives.neohapsis.com/archives/snort/2003-10/0239.html">h=
ttp://archives.neohapsis.com/archives/snort/2003-10/0239.html</A>):</FONT=
></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>Edit =
configure.in=20
(line 285) from:</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>   =20
AC_CHECK_LIB(mysqlclient, mysql_connect, FOUND=3Dyes,=20
FOUND=3Dno)</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>changed=20
to:</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>   =20
AC_CHECK_LIB(mysqlclient, mysql_real_connect, FOUND=3Dyes,=20
FOUND=3Dno)</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2>#aclocal</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2>#autoheader</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>  =

configure.in:30: warning: AC_TRY_RUN called without default to allow =
cross=20
compiling</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2>#automake</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2>#autoconf</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>  =

configure.in:30: warning: AC_TRY_RUN called without default to allow =
cross=20
compiling</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2># =
../configure=20
--enable-mysql --with-mysql-includes=3D/usr/local/mysql/include=20
--with-mysql-libraries=3D/usr/local/mysql/lib </FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial =
size=3D2>   =20
loading cache ./config.cache<BR>    checking for a BSD =
compatible=20
install... (cached) /usr/bin/install -c<BR>    checking =
whether=20
build environment is sane... yes</FONT></SPAN></DIV>
<DIV><SPAN=20
class=3D296155305-18122003>      &nbsp ;&nbs=
p;     =20
<FONT face=3DArial size=3D2>...</FONT></SPAN></DIV>
<DIV><SPAN=20
class=3D296155305-18122003>      &nbsp ;&nbs=
p;   =20
<FONT face=3DArial size=3D2>[snip]</FONT></SPAN></DIV>
<DIV><SPAN=20
class=3D296155305-18122003>      &nbsp ;&nbs=
p;   <FONT=20
face=3DArial size=3D2>   ...</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003>    <FONT =
face=3DArial=20
size=3D2>checking for /usr/local/mysql/include/mysql.h...=20
yes<BR>    checking for mysql_real_connect in =
-lmysqlclient...=20
no</FONT></SPAN></DIV><SPAN class=3D296155305-18122003>
<DIV><FONT face=3DArial size=3D2></FONT><BR><FONT face=3DArial=20
size=3D2>   =20
**********************************************<BR>    &nbsp=
; =20
ERROR: unable to find mysqlclient =
library<BR>     =20
checked in the following=20
places<BR>      &nbs p;   &nb=
sp;=20
/usr/local/mysql/lib<BR>   =20
**********************************************</FONT></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>--end=20
scenarios--</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>What =
are the steps I=20
should be following here to make this work?  Obviously I'm missing=20
something, but after nearly 10 hours of searching the archives and the =
rest of=20
tthe web for cryptic references, and trying every trick I can think of =
with=20
config.in, configure, and the makefiles, I'm =
stumped.</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>Please =
walk me=20
through the steps, and please use small words, since I'm getting dumber =
with=20
each passing hour.</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>Thank=20
you,</FONT></SPAN></DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D296155305-18122003><FONT face=3DArial size=3D2>John=20
Whitson</FONT></SPAN></SPAN></DIV></SPAN></DIV></BODY></HTML>

------=_NextPart_000_0036_01C3C505.74F4BB50--

-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

permalink · #2 (**permalink**) 01-02-2004

> ./configure --enable-mysql --with-mysql-includes=/usr/local/mysql/include
> --with-mysql-libraries=/usr/local/mysql/lib
> checking whether build environment is sane... yes
> ...
> [snip]
> ...
> checking for /usr/local/mysql/include/mysql.h... yes
> checking for mysql_real_connect in -lmysqlclient... no
>
> **********************************************
> ERROR: unable to find mysqlclient library
> checked in the following places
> /usr/local/mysql/lib
> **********************************************

Same boat as you here - it really doesn't work, does it? I'm gonna try
this one instead:

http://www.fidelissec.com/mudpit.html

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode