Re: [Snort-users] This is a new one

This is a discussion on Re: [Snort-users] This is a new one within the Snort forums, part of the System Security and Security Related category; --===============1767735920== Content-Type: multipart/alternative; boundary="----=_Part_10384_28252088.1185582502896" ------=_Part_10384_28252088.1185582502896 Content-Type: text/plain; charset=ISO-8859-1 ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-28-2007
Will Metcalf
 
Posts: n/a
Default Re: [Snort-users] This is a new one

--===============1767735920==
Content-Type: multipart/alternative;
boundary="----=_Part_10384_28252088.1185582502896"

------=_Part_10384_28252088.1185582502896
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

yeah it just cleans it if you have already built snort. Do you see the
following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?

checking for mysql... yes
checking for compress in -lz... yes

and

-DENABLE_MYSQL

when you run make?

On 7/27/07, Atkins, Dwane P <ATKINSD@uthscsa.edu> wrote:
>
> I just tried that in both directories and received this error:
>
>
>
> make: *** No rule to make target `distclean'. Stop.
>
>
>
> Thanks
>
>
>
> Dwane
>
>
> ------------------------------
>
> *From:* Will Metcalf [mailto:william.metcalf@gmail.com]
> *Sent:* Friday, July 27, 2007 6:46 PM
> *To:* Atkins, Dwane P
> *Cc:* Matt Jonkman; Snort-users@lists.sourceforge.net
> *Subject:* Re: [Snort-users] This is a new one
>
>
>
> make distclean && ./configure --with-mysql
>
> On 7/27/07, *Atkins, Dwane P* <ATKINSD@uthscsa.edu> wrote:
>
> I did recompile and still go the same message. I download the tarball
> that Will sent out and then I did a ./configure, make and make install.
> I then noticed the error and did a ./configure --with-mysql
> --enable-dynamicplugins, make and make install and still received the
> same error.
>
> Any ideas will be helpful.
>
> Thanks
>
> Dwane
>
> -----Original Message-----
> From: Matt Jonkman [mailto:jonkman@bleedingthreats.net]
> Sent: Friday, July 27, 2007 5:58 PM
> To: Will Metcalf
> Cc: Atkins, Dwane P; Snort-users@lists.sourceforge.net
> Subject: Re: [Snort-users] This is a new one
>
> Looks like you need to compile with --with-mysql.
>
> Will Metcalf wrote:
> > What exactly did you download?
> >
> > Regards,
> >
> > Will
> >
> >
> > On 7/27/07, *Atkins, Dwane P* <ATKINSD@uthscsa.edu
> > <mailto:ATKINSD@uthscsa.edu>> wrote:
> >
> > Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this build of
> > snort was obtained as a binary distribution (e.g., rpm, or

> Windows),
> > then check for alternate builds that contains the necessary

> 'mysql'
> > support. If this build of snort was compiled by you, then re-run
> > the ./configure script using the '--with-mysql' switch. For
> > non-standard installations of a database, the '--with-mysql=DIR'
> > syntax may need to be used to specify the base directory of the DB
> > install. See the database documentation for cursory details
> > (doc/README.database). and the URL to the most recent database
> > plugin documentation.
> >
> >
> >
> > I recently installed the latest snortsam patches and I have a
> > feeling that the new patch installs snort. I am trying to find

> out
> > how to get around this. Maybe someone can help.
> >
> >
> >
> > Dwane
> >
> >
> >
> >
> >
> >
> >

> ------------------------------------------------------------------------
> -
> > This SF.net email is sponsored by: Splunk Inc.
> > Still grepping through log files to find problems? Stop.
> > Now Search log events and configuration files using AJAX and a

> browser.
> > Download your FREE copy of Splunk now >> http://get.splunk.com/
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users@lists.sourceforge.net
> > <mailto:Snort-users@lists.sourceforge.net>
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/...fo/snort-users
> > Snort-users
> >

> <https://lists.sourceforge.net/lists/...ersSnort-users >
> > list archive:
> > http://www.geocrawler.com/redir-sf.p...st=snort-users
> > < http://www.geocrawler.com/redir-sf.php3?list=snort-users>
> >
> >
> >
> >

> ------------------------------------------------------------------------
> >
> >

> ------------------------------------------------------------------------
> -
> > This SF.net email is sponsored by: Splunk Inc.
> > Still grepping through log files to find problems? Stop.
> > Now Search log events and configuration files using AJAX and a

> browser.
> > Download your FREE copy of Splunk now >> http://get.splunk.com/
> >
> >
> >

> ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users@lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/...fo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.p...st=snort-users

>
> --
> --------------------------------------------
> Matthew Jonkman
> Bleeding Edge Threats
> US Phone 765-429-0398
> US Fax 312-264-0205
> AUS Phone 61-42-4157-491
> AUS Fax 61-29-4750-026
> http://www.bleedingthreats.net
> --------------------------------------------
>
> PGP: http://www.bleedingthreats.com/mattjonkman.asc
>
>
>


------=_Part_10384_28252088.1185582502896
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

yeah it just cleans it if you have already built snort.&nbsp; Do you see the following when you run ./configure --with-mysql in the <font style="color: rgb(0, 0, 0);" color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">
snort-snortsam-2.6.1.5 directory?</span></font><br><br>checking for mysql... yes<br>checking for compress in -lz... yes<br><br>and <br><br><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">
</span></font>-DENABLE_MYSQL <br><br>when you run make?<br><br><div><span class="gmail_quote">On 7/27/07, <b class="gmail_sendername">Atkins, Dwane P</b> &lt;<a href="mailto:ATKINSD@uthscsa.edu">ATKINSD@uthscsa. edu</a>&gt; wrote:
</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">












<div link="blue" vlink="blue" lang="EN-US">

<div>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">I just tried that in both directories and
received this error:</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">&nbsp;</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">make: *** No rule to make target
`distclean'.&nbsp; Stop.</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">&nbsp;</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">Thanks</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">&nbsp;</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">Dwane</span></font></p>

<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">&nbsp;</span></font></p>

<div>

<div style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">

<hr align="center" size="2" width="100%">

</span></font></div>

<p><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Will Metcalf
[mailto:<a href="mailto:william.metcalf@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">william.met calf@gmail.com</a>] <span class="q"><br>
<b><span style="font-weight: bold;">Sent:</span></b> Friday, July 27, 2007 6:46
PM<br>
<b><span style="font-weight: bold;">To:</span></b> Atkins, Dwane P<br></span>
<b><span style="font-weight: bold;">Cc:</span></b> Matt Jonkman; <a href="mailto:Snort-users@lists.sourceforge.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Snort-users@lists.sourceforge.net
</a><div><span class="e" id="q_1140a1eb5e5c3b79_3"><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Snort-users] This is
a new one</span></div></span></font></p>

</div><div><span class="e" id="q_1140a1eb5e5c3b79_5">

<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;">&nbsp;</span></font></p>

<p style="margin-bottom: 12pt;"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">make distclean &amp;&amp;
../configure --with-mysql</span></font></p>

<div>

<p><span><font face="Times New Roman" size="3"><span style="font-size: 12pt;">On 7/27/07, <b><span style="font-weight: bold;">Atkins,
Dwane P</span></b> &lt;<a href="mailto:ATKINSD@uthscsa.edu" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">ATKINSD@uth scsa.edu</a>&gt;
wrote: </span></font></span></p>

<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;">I did recompile and still go the same message.&nbsp;&nbsp;I download
the tarball<br>
that Will sent out and then I did a ./configure, make and make install. <br>
I then noticed the error and did a ./configure --with-mysql<br>
--enable-dynamicplugins, make and make install and still received the<br>
same error.<br>
<br>
Any ideas will be helpful.<br>
<br>
Thanks<br>
<br>
Dwane<br>
<br>
-----Original Message----- <br>
From: Matt Jonkman [mailto:<a href="mailto:jonkman@bleedingthreats.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">jonkman@ble edingthreats.net</a>]<br>
Sent: Friday, July 27, 2007 5:58 PM<br>
To: Will Metcalf<br>
Cc: Atkins, Dwane P; <a href="mailto:Snort-users@lists.sourceforge.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Snort-users@lists.sourceforge.net</a><br>
Subject: Re: [Snort-users] This is a new one<br>
<br>
Looks like you need to compile with --with-mysql.<br>
<br>
Will Metcalf wrote:<br>
&gt; What exactly did you download?<br>
&gt;<br>
&gt; Regards, <br>
&gt;<br>
&gt; Will<br>
&gt;<br>
&gt;<br>
&gt; On 7/27/07, *Atkins, Dwane P* &lt;<a href="mailto:ATKINSD@uthscsa.edu" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">ATKINSD@uth scsa.edu</a><br>
&gt; &lt;mailto:<a href="mailto:ATKINSD@uthscsa.edu" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">ATKINSD@uth scsa.edu</a>&gt;&gt;
wrote: <br>
&gt;<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR:
If this build of<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; snort was obtained as a binary distribution (e.g.,
rpm, or<br>
Windows),<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; then check for alternate builds that contains the
necessary <br>
'mysql'<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; support.&nbsp;&nbsp;If this build of snort was
compiled by you, then re-run<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; the ./configure script using the '--with-mysql'
switch. For<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; non-standard installations of a database, the
'--with-mysql=DIR' <br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; syntax may need to be used to specify the base
directory of the DB<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; install.&nbsp;&nbsp;See the database documentation
for cursory details<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; (doc/README.database). and the URL to the most
recent database <br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; plugin documentation.<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; I recently installed the latest snortsam patches
and I have a<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; feeling that the new patch installs
snort.&nbsp;&nbsp;I am trying to find<br>
out<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; how to get around this.&nbsp;&nbsp;Maybe someone
can help. <br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Dwane<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
------------------------------------------------------------------------<br>
-<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; This SF.net email is sponsored by: Splunk Inc. <br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Still grepping through log files to find
problems?&nbsp;&nbsp;Stop.<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Now Search log events and configuration files
using AJAX and
a<br>
browser.<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Download your FREE copy of Splunk now
&gt;&gt;&nbsp;&nbsp; <a href="http://get.splunk.com/" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://get.splunk.com/</a><br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; _______________________________________________<br >
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Snort-users mailing list<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; <a href="mailto:Snort-users@lists.sourceforge.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Snort-users@lists.sourceforge.net</a>
<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; &lt;mailto:<a href="mailto:Snort-users@lists.sourceforge.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Snort-users@lists.sourceforge.net</a>&gt;<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Go to this URL to change user options or
unsubscribe:<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; <a href="https://lists.sourceforge.net/lists/listinfo/snort-users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Snort-users<br>
&gt;<br>
&lt;<a href="https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">https://lists.sourceforge.net/lists/...ersSnort-users
</a>&gt;<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; list archive:<br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; <a href="http://www.geocrawler.com/redir-sf.php3?list=snort-users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.geocrawler.com/redir-sf.php3?list=snort-users</a><br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp; &lt;<a href="http://www.geocrawler.com/redir-sf.php3?list=snort-users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://www.geocrawler.com/redir-sf.php3?list=snort-users</a>&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
------------------------------------------------------------------------<br>
&gt;<br>
&gt;<br>
------------------------------------------------------------------------ <br>
-<br>
&gt; This SF.net email is sponsored by: Splunk Inc.<br>
&gt; Still grepping through log files to find problems?&nbsp;&nbsp;Stop.<br>
&gt; Now Search log events and configuration files using AJAX and a<br>
browser.<br>
&gt; Download your FREE copy of Splunk now &gt;&gt;&nbsp;&nbsp; <a href="http://get.splunk.com/" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://get.splunk.com/</a><br>
&gt;<br>
&gt;<br>
&gt;<br>
------------------------------------------------------------------------<br>
&gt;<br>
&gt; _______________________________________________ <br>
&gt; Snort-users mailing list<br>
&gt; <a href="mailto:Snort-users@lists.sourceforge.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Snort-users@lists.sourceforge.net</a><br>
&gt; Go to this URL to change user options or unsubscribe:<br>
&gt; <a href="https://lists.sourceforge.net/lists/listinfo/snort-users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br>
&gt; Snort-users list archive:<br>
&gt; <a href="http://www.geocrawler.com/redir-sf.php3?list=snort-users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.geocrawler.com/redir-sf.p...st=snort-users
</a><br>
<br>
--<br>
--------------------------------------------<br>
Matthew Jonkman<br>
Bleeding Edge Threats<br>
US Phone 765-429-0398<br>
US Fax 312-264-0205<br>
AUS Phone 61-42-4157-491<br>
AUS Fax 61-29-4750-026<br>
<a href="http://www.bleedingthreats.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.bleedingthreats.net</a><br>
--------------------------------------------<br>
<br>
PGP: <a href="http://www.bleedingthreats.com/mattjonkman.asc" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.bleedingthreats.com/mattjonkman.asc</a></span></font></p>

</div>

<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;">&nbsp;</span></font></p>

</span></div></div>

</div>


</blockquote></div><br>

------=_Part_10384_28252088.1185582502896--


--===============1767735920==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--===============1767735920==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============1767735920==--

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 08:16 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0