Re: Compiling with mysql & mssql support

["Will Metcalf" <william.metcalf () gmail com>]

mysql and mssql are different.  If you are going to be connecting to  a
mssql database from *nix use odbc....

http://www.snort.org/docs/snortdb/snortdb_install.html

Regards,

Will

On 5/1/07, David.Ryan () quintiles com <David.Ryan () quintiles com> wrote:
> All,
>
> I tried compiling with '--with-mssql' and it didn't complain, or at least
> not that I saw.  When I tried to compile previously without the relevant
> mysql-devel bits it complained loudly, so I expected it to do the same if
> there was something missing from the mssql environment.
>
> However, when I went to run snort it complained that this version wasn't
> compiled with mssql support.  It then suggested adding the switch (which I
> already did) or adding the database path, but in this instance the database
> is held elsewhere so I don't think the path concept would apply.  Error
> message follows -
> May  1 23:13:34 localhost snort[23378]: Daemon initialized, signaled
> parent pid: 23377
> May  1 23:13:34 localhost snort[23378]: database: 'mssql' support is not
> compiled into this build of snort
> May  1 23:13:34 localhost snort[23378]: FATAL ERROR: If this build of
> snort was obtained as a binary distribution (e.g., rpm, or Windows), then
> check for alternate builds that contains the necessary 'mssql' support.  If
> this build of snort was compiled by you, then re-run the the ./configure
> script using the '--with-mssql' switch. For non-standard installations of a
> database, the '--with-mssql=DIR' syntax may need to be used to specify the
> base directory of the DB install.  See the database documentation for
> cursory details (doc/README.database). and the URL to the most recent
> database plugin documentation.
>
> I read through README.database as suggested in the error message but I
> didn't see anything that helped in this case.
>
> Does anyone know of any step by step stuff for getting snort and mssql
> working ?  I know I should be getting snort to write unified output to
> barnyard and not directly to the database, but
> 1) this is a proof of concept environment at the moment - I just want to
> get it working first and *then* optimise it
> 2) from what I have found to date barnyard doesn't have a plugin for mssql
>
> Thanks for any suggestions.
>
> David
> =================================
> David Ryan
> IT Security Engineer, Global IT Security
> Quintiles, Global IT - Infrastructure, QDUB
>
> david.ryan () quintiles com
> v:  +353-1-819-5186, GMT+0
> m: +353-87-124-9108
> =================================
>
> **********************  IMPORTANT--PLEASE READ  ************************
> This electronic message, including its attachments, is COMPANY CONFIDENTIAL
> and may contain PROPRIETARY or LEGALLY PRIVILEGED information.  If you are
> not the intended recipient, you are hereby notified that any use, disclosure,
> copying, or distribution of this message or any of the information included
> in it is unauthorized and strictly prohibited.  If you have received this
> message in error, please immediately notify the sender by reply e-mail and
> permanently delete this message and its attachments, along with any copies
> thereof. If this electronic message contains a zipped attachment and you do
> not have a decompression tool, you may download unZIP (free of cost) from:
> http://www.mk-net-work.com/us/uz/unzip.htm. Alternatively, you may request
> that the attachment be resent in an uncompressed format.        Thank you.
> ************************************************************************
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users