Snort mailing list archives

RE: Problems with Snort and MySQL on FreeBSD 5


From: "Joo Carlos Couto" <jonplas115 () hotmail com>
Date: Mon, 09 Jun 2003 15:26:28 -0300

I tried to start snort with the -T option, but it didn't work and showed me th same error. I'll try to install again looking for the mysql parts of the instalation.

Thank You again.

João Carlos Monteiro Couto
Administração e Gerência de Redes
Ministério do Trabalho e Emprego



From: twig les <twigles () yahoo com>
To: Joo Carlos Couto <jonplas115 () hotmail com>, pauls () utdallas edu
CC: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Problems with Snort and MySQL on FreeBSD 5
Date: Mon, 9 Jun 2003 10:53:18 -0700 (PDT)

This happens a lot when bsd can't find mysql during the snort
compilation.  Start snort with the -T option, it may not be
starting at all.  If not try reinstalling snort over the current
setup and watching the make output to see if it finds mysql.

--- Joo Carlos Couto <jonplas115 () hotmail com> wrote:
> Thank You for answering...
>
> Don't worry, I did run "make install" after "make
> -DWITH_MYSQL" and
> everything went fine. But it simply doesn't work!!!
> Let's start again. Boot runs ok, apache initialized, Idled ...
> , MySQL, ...
> and when it has to come up with Snort, I get the following
> error:
> "If this built of Snort was obtained as a binary distribution
> (e.g., rpm, or
> Windows) , then check for alternate builds that contains the
> necessary
> 'mysql' support. ..."
> So, I don't have the Snort service started.
> If I try to start this by hand, using the snort.sh script, it
> gives me no
> errors and seens to start the service. But I have nothing
> written in my
> database.
>
>
>
> >From: "Schmehl, Paul L" <pauls () utdallas edu>
> >To: "Joo Carlos Couto"
> ><jonplas115 () hotmail com>,<snort-users () lists sourceforge net>
> >Subject: RE: [Snort-users] Problems with Snort and MySQL on
> FreeBSD 5
> >Date: Mon, 9 Jun 2003 10:18:40 -0500
> >
> >Don't hit me, OK?  You *did* run "make install" after "make
> >-DWITH_MYSQL" didn't you?  And you used "-DWITH_MYSQL" not
> "DWITH-MYSQL"
> >(which is what you typed in this message), right?
> >
> >If so, it should be working, assuming you have created a user
> for mysql
> >with the correct grants and you've placed that user's id and
> pass in the
> >snort.conf file.
> >
> >Paul Schmehl (pauls () utdallas edu)
> >Adjunct Information Security Officer
> >The University of Texas at Dallas
> >AVIEN Founding Member
> >http://www.utdallas.edu/~pauls/
> >
> >-----Original Message-----
> >From: Joo Carlos Couto [mailto:jonplas115 () hotmail com]
> >Sent: Monday, June 09, 2003 8:13 AM
> >To: snort-users () lists sourceforge net
> >Subject: [Snort-users] Problems with Snort and MySQL on
> FreeBSD 5
> >
> >
> >Hi everybody,
> >
> >I've installed a FreeBSD running Apache, MySQL, Snort and
> ACID. The
> >machine
> >starts booting ok, but after MySQL starts, Snort tries to
> come up but it
> >
> >stops with an error message. Something like I had installed
> Snort
> >without
> >MySQL support.
> >I installed Snort through cvsup using "make -DWITH-MYSQL" .
> >Ok, the machine starts, but when I try to to start snort
> manually it
> >gives
> >me no errors, but just doesn't work.
> >I guess my problem is in sending the snort alerts to the
> MySQL database.
> >Does someone have any idea???
> >
>
>_________________________________________________________________
> >MSN Hotmail, o maior webmail do Brasil.
> http://www.hotmail.com
> >
> >
> >
> >-------------------------------------------------------
> >This SF.net email is sponsored by:  Etnus, makers of
> TotalView, The best
> >thread debugger on the planet. Designed with thread debugging
> features
> >you've never dreamed of, try TotalView 6 free at
> www.etnus.com.
> >_______________________________________________
> >Snort-users mailing list
> >Snort-users () lists sourceforge net
> >Go to this URL to change user options or unsubscribe:
> >https://lists.sourceforge.net/lists/listinfo/snort-users
> >Snort-users list archive:
> >http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> >-------------------------------------------------------
> >This SF.net email is sponsored by:  Etnus, makers of
> TotalView, The best
> >thread debugger on the planet. Designed with thread debugging
> features
> >you've never dreamed of, try TotalView 6 free at
> www.etnus.com.
> >_______________________________________________
> >Snort-users mailing list
> >Snort-users () lists sourceforge net
> >Go to this URL to change user options or unsubscribe:
> >https://lists.sourceforge.net/lists/listinfo/snort-users
> >Snort-users list archive:
> >http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
_________________________________________________________________
> MSN Hotmail, o maior webmail do Brasil.
> http://www.hotmail.com
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of
> TotalView, The best
> thread debugger on the planet. Designed with thread debugging
> features
> you've never dreamed of, try TotalView 6 free at
> www.etnus.com.
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com


-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________________
MSN Hotmail, o maior webmail do Brasil.  http://www.hotmail.com



-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: