RE: Problems with Snort and MySQL on FreeBSD 5

[twig les <twigles () yahoo com>]

This happens a lot when bsd can't find mysql during the snort
compilation.  Start snort with the -T option, it may not be
starting at all.  If not try reinstalling snort over the current
setup and watching the make output to see if it finds mysql.

--- Joo Carlos Couto <jonplas115 () hotmail com> wrote:
> Thank You for answering...
>
> Don't worry, I did run "make install" after "make
> -DWITH_MYSQL" and 
> everything went fine. But it simply doesn't work!!!
> Let's start again. Boot runs ok, apache initialized, Idled ...
> , MySQL, ... 
> and when it has to come up with Snort, I get the following
> error:
> "If this built of Snort was obtained as a binary distribution
> (e.g., rpm, or 
> Windows) , then check for alternate builds that contains the
> necessary 
> 'mysql' support. ..."
> So, I don't have the Snort service started.
> If I try to start this by hand, using the snort.sh script, it
> gives me no 
> errors and seens to start the service. But I have nothing
> written in my 
> database.
>
>
>
> > From: "Schmehl, Paul L" <pauls () utdallas edu>
> > To: "Joo Carlos Couto" 
> > <jonplas115 () hotmail com>,<snort-users () lists sourceforge net>
> > Subject: RE: [Snort-users] Problems with Snort and MySQL on
> FreeBSD 5
> > Date: Mon, 9 Jun 2003 10:18:40 -0500
> >
> > Don't hit me, OK?  You *did* run "make install" after "make
> > -DWITH_MYSQL" didn't you?  And you used "-DWITH_MYSQL" not
> "DWITH-MYSQL"
> > (which is what you typed in this message), right?
> >
> > If so, it should be working, assuming you have created a user
> for mysql
> > with the correct grants and you've placed that user's id and
> pass in the
> > snort.conf file.
> >
> > Paul Schmehl (pauls () utdallas edu)
> > Adjunct Information Security Officer
> > The University of Texas at Dallas
> > AVIEN Founding Member
> > http://www.utdallas.edu/~pauls/
> >
> > -----Original Message-----
> > From: Joo Carlos Couto [mailto:jonplas115 () hotmail com]
> > Sent: Monday, June 09, 2003 8:13 AM
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] Problems with Snort and MySQL on
> FreeBSD 5
> > Hi everybody,
> >
> > I've installed a FreeBSD running Apache, MySQL, Snort and
> ACID. The
> > machine
> > starts booting ok, but after MySQL starts, Snort tries to
> come up but it
> > stops with an error message. Something like I had installed
> Snort
> > without
> > MySQL support.
> > I installed Snort through cvsup using "make -DWITH-MYSQL" .
> > Ok, the machine starts, but when I try to to start snort
> manually it
> > gives
> > me no errors, but just doesn't work.
> > I guess my problem is in sending the snort alerts to the
> MySQL database.
> > Does someone have any idea???
>
> _________________________________________________________________
> > MSN Hotmail, o maior webmail do Brasil. 
> http://www.hotmail.com
> > -------------------------------------------------------
> > This SF.net email is sponsored by:  Etnus, makers of
> TotalView, The best
> > thread debugger on the planet. Designed with thread debugging
> features
> > you've never dreamed of, try TotalView 6 free at
> www.etnus.com.
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by:  Etnus, makers of
> TotalView, The best
> > thread debugger on the planet. Designed with thread debugging
> features
> > you've never dreamed of, try TotalView 6 free at
> www.etnus.com.
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
_________________________________________________________________
> MSN Hotmail, o maior webmail do Brasil. 
> http://www.hotmail.com
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of
> TotalView, The best
> thread debugger on the planet. Designed with thread debugging
> features
> you've never dreamed of, try TotalView 6 free at
> www.etnus.com.
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com


-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users