RE: [Snort-users] Problems Upgrading

This is a discussion on RE: [Snort-users] Problems Upgrading within the Snort forums, part of the System Security and Security Related category; This message is in MIME format. Since your mail reader does not understand this format, some or all of this ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 06-15-2004
Rowland, Krisa W ERDC-ITL-MS Contractor
 
Posts: n/a
Default RE: [Snort-users] Problems Upgrading

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C45316.7C7E9374
Content-Type: text/plain

Well,

I managed to tackle that problem by adding the LD_LIBRARY_PATH. Now when I
try to start snort - I get the error:

database: configured to use mysql
database: 'mysql' support is not compiled into this build of snort

But I did the ./configure script using the '--with-mysql' switch command. I
did this is myself instead of root. But when I try to start snort as myself
I get this error:

Running in IDS mode
Log directory = /var/log/snort

Initializing Network Interface ge0
ERROR: You don't have permission to sniff.
Try doing this as root.
Fatal Error, Quitting..

Also - if I try and reconfigure as root - then I can't get it to recognize
where gcc is - even if I add it to the path - but it will as myself. Isn't
that crazy?

Any help would be appreciated.

Krisa

-----Original Message-----
From: Matt Kettler [mailto:mkettler@evi-inc.com]
Sent: Tuesday, June 15, 2004 1:07 PM
To: Rowland, Krisa W ERDC-ITL-MS Contractor; snort-users
Subject: RE: [Snort-users] Help please: libpcre.so.0: cannot open shared.. .

At 11:44 AM 6/15/2004, Rowland, Krisa W ERDC-ITL-MS Contractor wrote:
>I do not have a ld.so.conf in my /etc directory? In fact I don't have
>that file anywhere - yet my snort installed correctly and so did my pcre??


That's strange Krisa.. What kind of OS are you running? What loader are you
using?

It's possible you're using some kind of archaic version of *NIX that's got
a hard-coded loader path and the loader cannot be configured.

It's also possible that you're using some other loader other than GNU ld,
in which case the name of the config file for it may be different.

This is all stuff that's specific to the OS you run.


However, if your PCRE winds up in a path your loader already knows to use,
you don't need to change anything. Most of the time the failure to load a
library results from someone installing a library in /usr/local/lib on a
machine that's configured to only look in /lib and /usr/lib for libraries.






------_=_NextPart_001_01C45316.7C7E9374
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3DUS-ASCII">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2655.35">
<TITLE>RE: [Snort-users] Problems Upgrading</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Well, </FONT>
</P>

<P><FONT SIZE=3D2>I managed to tackle that problem by adding the =
LD_LIBRARY_PATH.&nbsp; Now when I try to start snort - I get the =
error:</FONT>
</P>

<P><FONT SIZE=3D2>&nbsp;database: configured to use mysql</FONT>
<BR><FONT SIZE=3D2>database: 'mysql' support is not compiled into this =
build of snort</FONT>
</P>

<P><FONT SIZE=3D2>But I did the ./configure script using the =
'--with-mysql' switch command.&nbsp; I did this is myself instead of =
root.&nbsp; But when I try to start snort as myself I get this =
error:</FONT></P>

<P><FONT SIZE=3D2>Running in IDS mode</FONT>
<BR><FONT SIZE=3D2>Log directory =3D /var/log/snort</FONT>
</P>

<P><FONT SIZE=3D2>Initializing Network Interface ge0</FONT>
<BR><FONT SIZE=3D2>ERROR: You don't have permission to sniff.</FONT>
<BR><FONT SIZE=3D2>Try doing this as root.</FONT>
<BR><FONT SIZE=3D2>Fatal Error, Quitting..</FONT>
</P>

<P><FONT SIZE=3D2>Also - if I try and reconfigure as root - then I =
can't get it to recognize where gcc is - even if I add it to the path - =
but it will as myself.&nbsp; Isn't that crazy?&nbsp; </FONT></P>

<P><FONT SIZE=3D2>Any help would be appreciated.&nbsp; </FONT>
</P>

<P><FONT SIZE=3D2>Krisa</FONT>
</P>

<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Matt Kettler [<A =
HREF=3D"mailto:mkettler@evi-inc.com">mailto:mkettler@evi-inc.com</A>] =
</FONT>
<BR><FONT SIZE=3D2>Sent: Tuesday, June 15, 2004 1:07 PM</FONT>
<BR><FONT SIZE=3D2>To: Rowland, Krisa W ERDC-ITL-MS Contractor; =
snort-users</FONT>
<BR><FONT SIZE=3D2>Subject: RE: [Snort-users] Help please: =
libpcre.so.0: cannot open shared.. .</FONT>
</P>

<P><FONT SIZE=3D2>At 11:44 AM 6/15/2004, Rowland, Krisa W ERDC-ITL-MS =
Contractor wrote:</FONT>
<BR><FONT SIZE=3D2>&gt;I do not have a ld.so.conf in my /etc =
directory?&nbsp; In fact I don't have </FONT>
<BR><FONT SIZE=3D2>&gt;that file anywhere - yet my snort installed =
correctly and so did my pcre??</FONT>
</P>

<P><FONT SIZE=3D2>That's strange Krisa.. What kind of OS are you =
running? What loader are you </FONT>
<BR><FONT SIZE=3D2>using?</FONT>
</P>

<P><FONT SIZE=3D2>It's possible you're using some kind of archaic =
version of *NIX that's got </FONT>
<BR><FONT SIZE=3D2>a hard-coded loader path and the loader cannot be =
configured.</FONT>
</P>

<P><FONT SIZE=3D2>It's also possible that you're using some other =
loader other than GNU ld, </FONT>
<BR><FONT SIZE=3D2>in which case the name of the config file for it may =
be different.</FONT>
</P>

<P><FONT SIZE=3D2>This is all stuff that's specific to the OS you =
run.</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>However, if your PCRE winds up in a path your loader =
already knows to use, </FONT>
<BR><FONT SIZE=3D2>you don't need to change anything. Most of the time =
the failure to load a </FONT>
<BR><FONT SIZE=3D2>library results from someone installing a library in =
/usr/local/lib on a </FONT>
<BR><FONT SIZE=3D2>machine that's configured to only look in /lib and =
/usr/lib for libraries.</FONT>
</P>
<BR>
<BR>
<BR>
<BR>

</BODY>
</HTML>
------_=_NextPart_001_01C45316.7C7E9374--


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:26 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0