[Snort-users] RE: Snort-users digest, Vol 1 #3871 - 5 msgs

yes, and no joy

however I made an additional symlink to libpcre.so.0 in /usr/lib and voila!

thanks
gwk

-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net]On Behalf Of
snort-users-request@lists.sourceforge.net
Sent: Thursday, January 01, 2004 9:09 PM
To: snort-users@lists.sourceforge.net
Subject: Snort-users digest, Vol 1 #3871 - 5 msgs


Send Snort-users mailing list submissions to
snort-users@lists.sourceforge.net

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/...fo/snort-users
or, via email, send a message with subject or body 'help' to
snort-users-request@lists.sourceforge.net

You can reach the person managing the list at
snort-users-admin@lists.sourceforge.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-users digest..."


Today's Topics:

1. libpcre.so.0 error loading shared libraries (Guy Witney Krocker)
2. barnyard with postgres (Bryan Irvine)
3. libpcre.so.0 error loading shared libraries (Guy Witney Krocker)
4. RE: Win32 - multiple interfaces? (Michael Steele)
5. Re: libpcre.so.0 error loading shared libraries (George Theall)

--__--__--

Message: 1
Date: Thu, 01 Jan 2004 15:02:45 -0800
From: Guy Witney Krocker <gwkrocker@shaw.ca>
To: snort-users@lists.sourceforge.net
Subject: [Snort-users] libpcre.so.0 error loading shared libraries

snort 2.1.0 on debian with mysql
compile failed looking for pcre
installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up

error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory

it is sitting in /usr/local/lib

any ideas?
gwk

sorry if this is a dup post - searched archives.. really



--__--__--

Message: 2
From: Bryan Irvine <bryan.irvine@kingcountyjournal.com>
To: 'Snort Users List' <snort-users@lists.sourceforge.net>
Date: Thu, 01 Jan 2004 15:55:44 -0800
Subject: [Snort-users] barnyard with postgres

I've just upgraded to snort 2.1 (this thresholding thing truely is
amazing!), and now I"d like to revisit the barnyard/postgres deal.

I see the barnyard version # hasn't changed in long time, so I'm
assuming the situation is as before, where all of the postgres stuff is
there but not functional (I think someone called them "stubs").
Anyone know if BY supports postgres yet?

-Bryan




--__--__--

Message: 3
Date: Thu, 01 Jan 2004 15:45:17 -0800
From: Guy Witney Krocker <gwkrocker@shaw.ca>
To: snort-users@lists.sourceforge.net
Subject: [Snort-users] libpcre.so.0 error loading shared libraries


snort 2.1.0 on debian with mysql
compile failed looking for pcre
installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up

error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory

it is sitting in /usr/local/lib

any ideas?
gwk

sorry if this is a dup post - searched archives.. really



--__--__--

Message: 4
From: "Michael Steele" <michaels@winsnort.com>
To: "'Snort Users List'" <snort-users@lists.sourceforge.net>
Subject: RE: [Snort-users] Win32 - multiple interfaces?
Date: Thu, 1 Jan 2004 16:30:07 -0800

Running two Snort services may be as simple as editing the original registry
key for the first instance of Snort, and then run another instance of the
'/SERVICE /INSTALL' command to add it again, being careful not to overwrite
the first instance.

You could also use another service tool like firedeamon or the Microsoft
files you described below.

Note: BACKUP your registry so you can revert back if something gets blown
out.

Kindest regards,

The WINSNORT.com Management Team
--
Pick up your FREE Windows or UNIX Snort installation guides
mailto:support@winsnort.com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org


> -----Original Message-----
> From: snort-users-admin@lists.sourceforge.net [mailto:snort-users-
> admin@lists.sourceforge.net] On Behalf Of Rich Adamson
> Sent: Thursday, January 01, 2004 1:09 PM
> To: 'Snort Users List'; Scot Scot
> Subject: Re: [Snort-users] Win32 - multiple interfaces?
>
> Hi Scot,
>
> > > Thanks Mike..
> > >
> > > > Q1: You can't detect two interfaces with one Snort instance.
> > > >
> > > > Note: Throw some more RAM in and run 2 Snorts
> > >
> > > I'm going to set up one instance to run as a Service. Are your
> > instructions
> > > at your site now?
> > >
> > > When that's all done, looks like I'll take another run at updating
> > > the README.WIN32 stuff. Been a few changes since I wrote that original
> > > one. :)
> > >
> > > Rich
> > >
> > <snip>
> >
> > How about running both instances as a service?
> >
> > Here is a recommendation:
> >
> > Use instsrv.exe and srvany.exe from the NT Resource kit
> >
> > Step-1, execute the following commands:
> >
> > instsrv srvany %windir%\srvany.exe
> > instsrv snort1 %windir%\srvany.exe
> > instsrv snort2 %windir%\srvany.exe
> >
> > Step-2, build two .reg files for each snort instance and import them
> into
> > the registry:
> > (You will have to fill in the %%'s with your own values)
>
> Wouldn't it actually be easier to have a snort1.exe and snort2.exe and
> config both to run as a Service? (I haven't tried this, so not sure it
> would actually work.)
>
> Rich
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
> Free Linux Tutorials. Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/...fo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.p...st=snort-users




--__--__--

Message: 5
Date: Thu, 1 Jan 2004 22:31:47 -0500
From: George Theall <theall@tifaware.com>
To: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] libpcre.so.0 error loading shared libraries


--sm4nu43k4a2Rpi4c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jan 01, 2004 at 03:45:17PM -0800, Guy Witney Krocker wrote:

> installed pcre 4.5
> snort 2.1 then compiled and installed OK
> however fails on start up
>=20
> error while loading shared libraries: libpcre.so.0: cannot open shared
> object file: no such file or directory


Is /usr/local/lib in /etc/ld.so.conf? Have you run ldconfig?

George
--=20
theall@tifaware.com

--sm4nu43k4a2Rpi4c
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQE/9OYjsWUciNmuHkURAoNnAJ4h2QxejJBzg8Pn0DktB6gs7ZuC8Q CeNr99
VrxuN51ULbbTjn77Qt5qcho=
=736r
-----END PGP SIGNATURE-----

--sm4nu43k4a2Rpi4c--



--__--__--

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/snort-users


End of Snort-users Digest



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users