This is a discussion on RE: [Snort-users] Problems Upgrading within the Snort forums, part of the System Security and Security Related category; This message is in MIME format. Since your mail reader does not understand this format, some or all of this ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible. ------_=_NextPart_001_01C45316.7C7E9374 Content-Type: text/plain Well, I managed to tackle that problem by adding the LD_LIBRARY_PATH. Now when I try to start snort - I get the error: database: configured to use mysql database: 'mysql' support is not compiled into this build of snort But I did the ./configure script using the '--with-mysql' switch command. I did this is myself instead of root. But when I try to start snort as myself I get this error: Running in IDS mode Log directory = /var/log/snort Initializing Network Interface ge0 ERROR: You don't have permission to sniff. Try doing this as root. Fatal Error, Quitting.. Also - if I try and reconfigure as root - then I can't get it to recognize where gcc is - even if I add it to the path - but it will as myself. Isn't that crazy? Any help would be appreciated. Krisa -----Original Message----- From: Matt Kettler [mailto:mkettler@evi-inc.com] Sent: Tuesday, June 15, 2004 1:07 PM To: Rowland, Krisa W ERDC-ITL-MS Contractor; snort-users Subject: RE: [Snort-users] Help please: libpcre.so.0: cannot open shared.. . At 11:44 AM 6/15/2004, Rowland, Krisa W ERDC-ITL-MS Contractor wrote: >I do not have a ld.so.conf in my /etc directory? In fact I don't have >that file anywhere - yet my snort installed correctly and so did my pcre?? That's strange Krisa.. What kind of OS are you running? What loader are you using? It's possible you're using some kind of archaic version of *NIX that's got a hard-coded loader path and the loader cannot be configured. It's also possible that you're using some other loader other than GNU ld, in which case the name of the config file for it may be different. This is all stuff that's specific to the OS you run. However, if your PCRE winds up in a path your loader already knows to use, you don't need to change anything. Most of the time the failure to load a library results from someone installing a library in /usr/local/lib on a machine that's configured to only look in /lib and /usr/lib for libraries. ------_=_NextPart_001_01C45316.7C7E9374 Content-Type: text/html Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3DUS-ASCII"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version = 5.5.2655.35"> <TITLE>RE: [Snort-users] Problems Upgrading</TITLE> </HEAD> <BODY> <P><FONT SIZE=3D2>Well, </FONT> </P> <P><FONT SIZE=3D2>I managed to tackle that problem by adding the = LD_LIBRARY_PATH. Now when I try to start snort - I get the = error:</FONT> </P> <P><FONT SIZE=3D2> database: configured to use mysql</FONT> <BR><FONT SIZE=3D2>database: 'mysql' support is not compiled into this = build of snort</FONT> </P> <P><FONT SIZE=3D2>But I did the ./configure script using the = '--with-mysql' switch command. I did this is myself instead of = root. But when I try to start snort as myself I get this = error:</FONT></P> <P><FONT SIZE=3D2>Running in IDS mode</FONT> <BR><FONT SIZE=3D2>Log directory =3D /var/log/snort</FONT> </P> <P><FONT SIZE=3D2>Initializing Network Interface ge0</FONT> <BR><FONT SIZE=3D2>ERROR: You don't have permission to sniff.</FONT> <BR><FONT SIZE=3D2>Try doing this as root.</FONT> <BR><FONT SIZE=3D2>Fatal Error, Quitting..</FONT> </P> <P><FONT SIZE=3D2>Also - if I try and reconfigure as root - then I = can't get it to recognize where gcc is - even if I add it to the path - = but it will as myself. Isn't that crazy? </FONT></P> <P><FONT SIZE=3D2>Any help would be appreciated. </FONT> </P> <P><FONT SIZE=3D2>Krisa</FONT> </P> <P><FONT SIZE=3D2>-----Original Message-----</FONT> <BR><FONT SIZE=3D2>From: Matt Kettler [<A = HREF=3D"mailto:mkettler@evi-inc.com">mailto:mkettler@evi-inc.com</A>] = </FONT> <BR><FONT SIZE=3D2>Sent: Tuesday, June 15, 2004 1:07 PM</FONT> <BR><FONT SIZE=3D2>To: Rowland, Krisa W ERDC-ITL-MS Contractor; = snort-users</FONT> <BR><FONT SIZE=3D2>Subject: RE: [Snort-users] Help please: = libpcre.so.0: cannot open shared.. .</FONT> </P> <P><FONT SIZE=3D2>At 11:44 AM 6/15/2004, Rowland, Krisa W ERDC-ITL-MS = Contractor wrote:</FONT> <BR><FONT SIZE=3D2>>I do not have a ld.so.conf in my /etc = directory? In fact I don't have </FONT> <BR><FONT SIZE=3D2>>that file anywhere - yet my snort installed = correctly and so did my pcre??</FONT> </P> <P><FONT SIZE=3D2>That's strange Krisa.. What kind of OS are you = running? What loader are you </FONT> <BR><FONT SIZE=3D2>using?</FONT> </P> <P><FONT SIZE=3D2>It's possible you're using some kind of archaic = version of *NIX that's got </FONT> <BR><FONT SIZE=3D2>a hard-coded loader path and the loader cannot be = configured.</FONT> </P> <P><FONT SIZE=3D2>It's also possible that you're using some other = loader other than GNU ld, </FONT> <BR><FONT SIZE=3D2>in which case the name of the config file for it may = be different.</FONT> </P> <P><FONT SIZE=3D2>This is all stuff that's specific to the OS you = run.</FONT> </P> <BR> <P><FONT SIZE=3D2>However, if your PCRE winds up in a path your loader = already knows to use, </FONT> <BR><FONT SIZE=3D2>you don't need to change anything. Most of the time = the failure to load a </FONT> <BR><FONT SIZE=3D2>library results from someone installing a library in = /usr/local/lib on a </FONT> <BR><FONT SIZE=3D2>machine that's configured to only look in /lib and = /usr/lib for libraries.</FONT> </P> <BR> <BR> <BR> <BR> </BODY> </HTML> ------_=_NextPart_001_01C45316.7C7E9374-- ------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |
![]() |
| Thread Tools | |
| Display Modes | |
|
|