Re: [Snort-users] This is a new one

permalink · #1 (**permalink**) 07-28-2007

This is a multi-part message in MIME format.

--===============0938176150==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C7D0A8.92BE6995"

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7D0A8.92BE6995
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

When I created the snort device, I untarred in a directory call
/root/snortinstall. I have the snort-2.6.15 and the
snort-snortsam-2.6.1.5 directory. Do I do the make distclean in the
snort or snortsam directory?

=20

Dwane

=20

________________________________

From: Will Metcalf [mailto:william.metcalf@gmail.com]=20
Sent: Friday, July 27, 2007 6:46 PM
To: Atkins, Dwane P
Cc: Matt Jonkman; Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one

=20

make distclean && ./configure --with-mysql

On 7/27/07, Atkins, Dwane P <ATKINSD@uthscsa.edu> wrote:=20

I did recompile and still go the same message. I download the tarball
that Will sent out and then I did a ./configure, make and make install.=20
I then noticed the error and did a ./configure --with-mysql
--enable-dynamicplugins, make and make install and still received the
same error.

Any ideas will be helpful.

Thanks

Dwane

-----Original Message-----=20
From: Matt Jonkman [mailto:jonkman@bleedingthreats.net]
Sent: Friday, July 27, 2007 5:58 PM
To: Will Metcalf
Cc: Atkins, Dwane P; Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one

Looks like you need to compile with --with-mysql.

Will Metcalf wrote:
> What exactly did you download?
>
> Regards,=20
>
> Will
>
>
> On 7/27/07, *Atkins, Dwane P* <ATKINSD@uthscsa.edu
> <mailto:ATKINSD@uthscsa.edu>> wrote:=20
>
> Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this build of
> snort was obtained as a binary distribution (e.g., rpm, or
Windows),
> then check for alternate builds that contains the necessary=20
'mysql'
> support. If this build of snort was compiled by you, then re-run
> the ./configure script using the '--with-mysql' switch. For
> non-standard installations of a database, the '--with-mysql=3DDIR' =

> syntax may need to be used to specify the base directory of the DB
> install. See the database documentation for cursory details
> (doc/README.database). and the URL to the most recent database=20
> plugin documentation.
>
>
>
> I recently installed the latest snortsam patches and I have a
> feeling that the new patch installs snort. I am trying to find
out
> how to get around this. Maybe someone can help.=20
>
>
>
> Dwane
>
>
>
>
>
>
>
------------------------------------------------------------------------
-
> This SF.net email is sponsored by: Splunk Inc.=20
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a
browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net=20
> <mailto:Snort-users@lists.sourceforge.net>
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/...fo/snort-users
> Snort-users
>
<https://lists.sourceforge.net/lists/...ersSnort-users >
> list archive:
> http://www.geocrawler.com/redir-sf.p...=3Dsnort-users
> < http://www.geocrawler.com/redir-sf.p...=3Dsnort-users
<http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users> >
>
>
>
>
------------------------------------------------------------------------
>
>
------------------------------------------------------------------------

-
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a
browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
>
>
>
------------------------------------------------------------------------
>
> _______________________________________________=20
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/...fo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.p...snort-users=20

--
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
US Phone 765-429-0398
US Fax 312-264-0205
AUS Phone 61-42-4157-491
AUS Fax 61-29-4750-026
http://www.bleedingthreats.net
--------------------------------------------

PGP: http://www.bleedingthreats.com/mattjonkman.asc

=20

------_=_NextPart_001_01C7D0A8.92BE6995
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<o:SmartTagType
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags" =
name=3D"City"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"place"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"PersonName"/>

<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dblue>

<div class=3DSection1>

When I created the snort device, I
untarred in a directory call /root/snortinstall.  I have the =
snort-2.6.15 and
the snort-snortsam-2.6.1.5 directory.  Do I do the make distclean =
in the snort
or snortsam directory?<o:p></o:p>

<o:p> </o:p>

Dwane<o:p></o:p>

<o:p> </o:p>

<div>

<div class=3DMsoNormal align=3Dcenter style=3D'text-align:center'>

<hr size=3D2 width=3D"100%" align=3Dcenter tabindex=3D-1>

</div>

From: Will =
Metcalf
[mailto:william.metcalf@gmail.com] 
Sent: Friday, July 27, =
2007 6:46
PM 
To: Atkins, Dwane P 
Cc: Matt Jonkman; =
<st1:PersonName
w:st=3D"on">Snort-users@lists.sourceforge.net</st1:PersonName> 
Subject: Re: =
[Snort-users] This is
a new one<o:p></o:p>

</div>

<o:p> </o:p>

make distclean =
&&
../configure --with-mysql<o:p></o:p>

<div>

On 7/27/07, Atkins,
Dwane P <<a =
href=3D"mailto:ATKINSD@uthscsa.edu">ATKINSD@uthscs a.edu</a>>
wrote: <o:p></o:p>

I did recompile and still go the same message.  I =
download
the tarball 
that Will sent out and then I did a ./configure, make and make install. =
 
I then noticed the error and did a ./configure --with-mysql 
--enable-dynamicplugins, make and make install and still received =
the 
same error. 
 
Any ideas will be helpful. 
 
Thanks 
 
Dwane 
 
-----Original Message----- 
From: Matt Jonkman [mailto:<a =
href=3D"mailto:jonkman@bleedingthreats.net">jonkma n@bleedingthreats.net</=
a>] 
Sent: Friday, July 27, 2007 5:58 PM 
To: Will Metcalf 
Cc: Atkins, Dwane P; <a =
href=3D"mailto:Snort-users@lists.sourceforge.net">Snort-users@lists.sourc=
eforge.net</a> 
Subject: Re: [Snort-users] This is a new one 
 
Looks like you need to compile with --with-mysql. 
 
Will Metcalf wrote: 
> What exactly did you download? 
> 
> Regards, 
> 
> Will 
> 
> 
> On 7/27/07, *Atkins, Dwane P* <<a =
href=3D"mailto:ATKINSD@uthscsa.edu">ATKINSD@uthscs a.edu</a> 
> <mailto:<a =
href=3D"mailto:ATKINSD@uthscsa.edu">ATKINSD@uthscs a.edu</a>>>
wrote: 
> 
>     Jul 27 11:29:52 Wilbur snort[3024]: FATAL =
ERROR:
If this build of 
>     snort was obtained as a binary distribution =
(e.g.,
rpm, or 
Windows), 
>     then check for alternate builds that =
contains the
necessary 
'mysql' 
>     support.  If this build of snort =
was
compiled by you, then re-run 
>     the ./configure script using the =
'--with-mysql'
switch. For 
>     non-standard installations of a database, =
the
'--with-mysql=3DDIR' 
>     syntax may need to be used to specify the =
base
directory of the DB 
>     install.  See the database =
documentation
for cursory details 
>     (doc/README.database). and the URL to the =
most
recent database 
>     plugin documentation. 
> 
> 
> 
>     I recently installed the latest snortsam =
patches
and I have a 
>     feeling that the new patch installs
snort.  I am trying to find 
out 
>     how to get around this.  Maybe =
someone
can help. 
> 
> 
> 
>     Dwane 
> 
> 
> 
> 
> 
> 
> 
------------------------------------------------------------------------<=
br>
- 
>     This SF.net email is sponsored by: Splunk =
Inc. 
>     Still grepping through log files to find
problems?  Stop. 
>     Now Search log events and configuration =
files
using <st1:City w:st=3D"on"><st1:place =
w:st=3D"on">AJAX</st1:place></st1:City> and
a 
browser. 
>     Download your FREE copy of Splunk now
>>   <a =
href=3D"http://get.splunk.com/">http://get.splunk.com/</a> 
>     =
_______________________________________________ 
>     Snort-users mailing list 
>     <a =
href=3D"mailto:Snort-users@lists.sourceforge.net">Snort-users@lists.sourc=
eforge.net</a>
 
>     <mailto:<a
href=3D"mailto:Snort-users@lists.sourceforge.net">Snort-users@lists.sourc=
eforge.net</a>> 
>     Go to this URL to change user options or
unsubscribe: 
>     <a
href=3D"https://lists.sourceforge.net/lists/listinfo/snort-users">https:/=
/lists.sourceforge.net/lists/listinfo/snort-users</a> 
>     Snort-users 
> 
<<a
href=3D"https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-use=
rs">https://lists.sourceforge.net/lists/...ersSnort-users
</a>> 
>     list archive: 
>     <a
href=3D"http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users">http:=
//www.geocrawler.com/redir-sf.php3?list=3Dsnort-users</a> 
>     <<a
href=3D"http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users">
http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users</a>> 
> 
> 
> 
> 
------------------------------------------------------------------------<=
br>
> 
> 
------------------------------------------------------------------------ =
 
- 
> This SF.net email is sponsored by: Splunk Inc. 
> Still grepping through log files to find =
problems?  Stop. 
> Now Search log events and configuration files using <st1:City =
w:st=3D"on"><st1:place
w:st=3D"on">AJAX</st1:place></st1:City> and a 
browser. 
> Download your FREE copy of Splunk now >>   <a
href=3D"http://get.splunk.com/">http://get.splunk.com/</a> 
> 
> 
> 
------------------------------------------------------------------------<=
br>
> 
> _______________________________________________ 
> Snort-users mailing list 
> <a =
href=3D"mailto:Snort-users@lists.sourceforge.net">Snort-users@lists.sourc=
eforge.net</a> 
> Go to this URL to change user options or unsubscribe: 
> <a =
href=3D"https://lists.sourceforge.net/lists/listinfo/snort-users">https:/=
/lists.sourceforge.net/lists/listinfo/snort-users</a> 
> Snort-users list archive: 
> <a =
href=3D"http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users">http:=
//www.geocrawler.com/redir-sf.php3?list=3Dsnort-users
</a> 
 
-- 
-------------------------------------------- 
Matthew Jonkman 
Bleeding Edge Threats 
US Phone 765-429-0398 
US Fax 312-264-0205 
AUS Phone 61-42-4157-491 
AUS Fax 61-29-4750-026 
<a =
href=3D"http://www.bleedingthreats.net">http://www.bleedingthreats.net</a=
> 
-------------------------------------------- 
 
PGP: <a =
href=3D"http://www.bleedingthreats.com/mattjonkman.asc">http://www.bleedi=
ngthreats.com/mattjonkman.asc</a><o:p></o:p>

</div>

<o:p> </o:p>

</div>

</body>

</html>

------_=_NextPart_001_01C7D0A8.92BE6995--

--===============0938176150==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--===============0938176150==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0938176150==--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode