Re: snort-1.8.7 could find libidmef

[Joe McAlerney <joey () SiliconDefense com>]

Hi Dave,

Couple of things.

1) Make sure you are using libidmef 0.6.3 for the current Snort plugin
2) You will get an "libidmef library (idmef) not found ...." message if
any of the libraries dependencies are also not found, i.e. libntp, or
libxml2.  Make sure those are both installed, and use the
--with-libxml2-libraries=, and --with-libntp-libraries= configure tags.
3) Make sure /usr/local/lib is in your /etc/ld.so.conf file (if your os
has one).  If it's not in there, add the line and run "ldconfig".

If you are still having problems, contact
libidmef-users () lists sourceforge net.

Just FYI, the IDMEF plugin for Snort 1.9 has been 95% done for quite
some time now.  The development team has simply been busy on other
projects.  We believe the plugin will be finished within the next two
weeks.

Thanks,

-Joe

-- 
Joe McAlerney
Silicon Defense: IDS Solutions

snort bsd wrote:
> Hi:
>
> need help!
>
> i am tryting to get snort-1.8.7 working with libidmef.
> my option were --enable-idmef
> --with-libidmef-libraries=/usr/local/lib. well, it
> found idmefxml.h alright, but could not find library
> for libmef:
>
> checking for newIDMEF_message in -lidmef... no
> configure: error: libidmef library (idmef) not found
> in /usr/local/lib
>
> checked the library /usr/local/lib/libidmef.la and it
> is there.
>
> any ideas?
>
> tia
>
> _dave
>
> http://mobile.yahoo.com.au - Yahoo! Messenger for SMS
> - Always be connected to your Messenger Friends
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users