RE: [Snort-users] Help!

My issue has been resolved. Thanks to everyones input. Each "try this" =
got me closer to the root of the issue. I had two versions of MySql =
installed one was a binary install and the second one was a source =
install. Snort wouldnt compile under the binary and had library sharing =
violations with the source install. Once that was resolved through =
changing some PATH statements I got snort dumping to MySql. Then Acid =
wouldnt connect to mysql cause the mysql.sock file had gotten corrupted. =
I created a symlink to the .sock file for the source install in the =
directory that acid was expecting it to be and all is well. :)

Kim Sassaman=20
CISSP - CCNP
"Research is what I'm doing when I don't know what I'm doing." - Wernher =
Von Braun (1912-1977)=20




-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net]On Behalf Of David
Sent: Wednesday, June 16, 2004 6:14 AM
To: Sassaman, Kim (CCI-Phoenix); snort-users@lists.sourceforge.net
Subject: RE: [Snort-users] Help!



Hey Kim,



Not sure if this will help, but is your libmysqlclient.a library in a =
non-standard location? if it is you may need to add it to your search =
path before you run the configure script. For us, the libmysqlclient.a =
library was in /usr/local/mysql/lib/mysql/ and this needed to be added =
to our LIBPATH environment variable in order for it to be found. I'm =
not that familiar with redhat, but I think if you do this:



export LIBPATH=3D$LIBPATH:/usr/local/mysql/lib/mysql

( replace /usr/local/mysql/lib/mysql with where your library is.)



Just a thought! Hope it helps, though it may not....





Dave





--- On Tue 06/15, < Kim.Sassaman@cox.com > wrote:



From: [mailto: Kim.Sassaman@cox.com]

To: snort-users@lists.sourceforge.net

Date: Tue, 15 Jun 2004 14:45:13 -0700

Subject: [Snort-users] Help!



I have setup mysql, acid, and snort on a redhat 9 box with apache. =
Everything is working, mysql has the snort db and acid is up and =
running... thing is when i launch snort i get the following:



elnet_decode arguments:

Ports to decode telnet on: 21 23 25 119=20

database: compiled support for ( )

database: configured to use mysql

database: 'mysql' support is not compiled into this build of snort



ERROR: If this build of snort was obtained as a binary distribution =
(e.g., rpm,

or Windows), then check for alternate builds that contains the necessary

'mysql' support.



If this build of snort was compiled by you, then re-run the

the ./configure script using the '--with-mysql' switch.

For non-standard installations of a database, the '--with-mysql=3DDIR'

syntax may need to be used to specify the base directory of the DB =
install.



See the database documentation for cursory details =
(doc/README.database).

and the URL to the most recent database plugin documentation.

Fatal Error, Quitting..

[root@ip68-231-82-63 snort-2.1.3]#=20





I have compiled recompiled re downloaded the source and removed binaries =
created in the process to ensure that=20

/configure --with-mysql

/configure --with-mysql=3DDIR



to no avail.... i keep getting the same error... help!



Kim Sassaman=20

CISSP - CCNP

Data Network Engineer

Cox Communications - Phoenix

1550 West Deer Valley Road

Phoenix, Arizona 85027

Mobile: 602 694 1429

Desk: 623 328 3418

Pager: 888-831-4009



"Research is what I'm doing when I don't know what I'm doing." - Wernher =
Von Braun (1912-1977)=20











-------------------------------------------------------

This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference

Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer

Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA

REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND

_______________________________________________

Snort-users mailing list

Snort-users@lists.sourceforge.net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/...fo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.p...=3Dsnort-users



_______________________________________________
Join Excite! - http://www.excite.com
The most personalized portal on the Web!


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...=3Dsnort-users


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users