Re: Compiling with mysql & mssql support

[David.Ryan () Quintiles com]

All,

I tried compiling with '--with-mssql' and it didn't complain, or at least 
not that I saw.  When I tried to compile previously without the relevant 
mysql-devel bits it complained loudly, so I expected it to do the same if 
there was something missing from the mssql environment. 

However, when I went to run snort it complained that this version wasn't 
compiled with mssql support.  It then suggested adding the switch (which I 
already did) or adding the database path, but in this instance the 
database is held elsewhere so I don't think the path concept would apply. 
Error message follows -
May  1 23:13:34 localhost snort[23378]: Daemon initialized, signaled 
parent pid: 23377
May  1 23:13:34 localhost snort[23378]: database: 'mssql' support is not 
compiled into this build of snort
May  1 23:13:34 localhost snort[23378]: FATAL ERROR: If this build of 
snort was obtained as a binary distribution (e.g., rpm, or Windows), then 
check for alternate builds that contains the necessary 'mssql' support. If 
this build of snort was compiled by you, then re-run the the ./configure 
script using the '--with-mssql' switch. For non-standard installations of 
a database, the '--with-mssql=DIR' syntax may need to be used to specify 
the base directory of the DB install.  See the database documentation for 
cursory details (doc/README.database). and the URL to the most recent 
database plugin documentation.

I read through README.database as suggested in the error message but I 
didn't see anything that helped in this case.

Does anyone know of any step by step stuff for getting snort and mssql 
working ?  I know I should be getting snort to write unified output to 
barnyard and not directly to the database, but
1) this is a proof of concept environment at the moment - I just want to 
get it working first and *then* optimise it
2) from what I have found to date barnyard doesn't have a plugin for mssql

Thanks for any suggestions.

David
=================================
David Ryan
IT Security Engineer, Global IT Security
Quintiles, Global IT - Infrastructure, QDUB

david.ryan () quintiles com
v:  +353-1-819-5186, GMT+0
m: +353-87-124-9108
=================================

**********************  IMPORTANT--PLEASE READ  ************************
This electronic message, including its attachments, is COMPANY CONFIDENTIAL
and may contain PROPRIETARY or LEGALLY PRIVILEGED information.  If you are 
not the intended recipient, you are hereby notified that any use, disclosure,
copying, or distribution of this message or any of the information included
in it is unauthorized and strictly prohibited.  If you have received this
message in error, please immediately notify the sender by reply e-mail and
permanently delete this message and its attachments, along with any copies
thereof. If this electronic message contains a zipped attachment and you do
not have a decompression tool, you may download unZIP (free of cost) from:
http://www.mk-net-work.com/us/uz/unzip.htm. Alternatively, you may request
that the attachment be resent in an uncompressed format.        Thank you. 
************************************************************************

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users