RE: Snort install

["Austad, Jay" <austad () marketwatch com>]

Also, if you've installed libpcap from source, and done the normal "make
install", it won't show up in the rpm database.  If you want your source
compiled programs to show up in the rpm database, you can get the program
"checkinstall", do a search on freshmeat.net for it.

If you have installed libpcap from source and you know it's on the box, you
can install the snort rpm using:
rpm -ivh --nodeps snort-xxxxxx.rpm

Jay

> -----Original Message-----
> From: Chris Green [mailto:cmg () uab edu] 
> Sent: Thursday, January 17, 2002 5:05 PM
> To: Warrick FitzGerald
> Cc: snort-users () lists sourceforge net
> Subject: Re: [Snort-users] Snort install
>
>
> "Warrick FitzGerald" <wfitzgerald () livetechnology com> writes:
>
> > 1.  (*) text/plain          ( ) text/html           
> >
> > Hi All,
> >  
> > I know this is a real newbie question, but Im sorry I'v 
> been stuck for a
> > day and a half and really need some help. 
> >  
> > When installing "snort-1.8.1-1mdk.i586.rpm" i get the 
> following error :
>
> Warning: thats a very old version of snort
>
> >  
> > error: failed dependencies:
> >         libpcap >= 0.4 is needed by snort-1.8.1-1mdk
> >         libpcap.so.0   is needed by snort-1.8.1-1mdk
> >  
> > Yes this seems simple and I know Im going to feel stupid 
> when I hear the
> > answer but here is what I have done to fix the problem.
> >  
> > A. Tried to install libpcap, but am not 100% sure how to 
> tell if it is
> > installed correctly. However rpm -q reveals that it is not
>
> rpm -q libpcap
>
> >  [root@WarrickLinux root]# rpm -qa | grep libp libpng2-1.0.12-2mdk
> > libpilot-link4-0.9.5-3mdk
> >     
> >     the confusing thing though is that tcpdump works ???? HOW ????
>
> Statically linked pcap into the binary.
> >  
> > B. My Path looks something like this :
>
> FYI $PATH doesn't have anything to do with that library problem. 
> >  
> > If anyone can tell me what Im doing wrong, I would really appreciate
> it.
>
> You need to install libpcap, preferably a very current one.  I'd
> recommend downloading the current beta pcap and compiling snort
> against that.
>
> When you compile snort, use --with-libpcap-libraries=~/src/libpcap---
> --with-libpcap-libraries=~/src/libpcap-includes=~/src/libpcap---
> -- 
> Chris Green <cmg () uab edu>
> Don't use a big word where a diminutive one will suffice.
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users