Snort mailing list archives
Re: Unable to install Snort 2.6.1.4 on RHEL5
From: "Patrick S. Harper" <patrick () internetsecurityguru com>
Date: Wed, 16 May 2007 16:11:55 -0500
I know it will work on RHEL 4 but I also did an install on RHEL 5 yesterday per my doc and it worked the same. I also know it works the same in CentOS 4 and 5
-----Original Message----- From: Dan Brummer [mailto:dan.brummer () vegas com] Sent: Wednesday, May 16, 2007 3:41 PM To: Patrick S. Harper; hhoffman () ip-solutions net Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 Remove and reinstall of libpcap and libpcap-devel did not fix :\ I'm going to downgrade to RHEL4 and see if I can get the system up. Thanks. -----Original Message----- From: Patrick S. Harper [mailto:patrick () internetsecurityguru com] Sent: Monday, May 14, 2007 6:21 PM To: Dan Brummer; hhoffman () ip-solutions net Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 yum remove libpcap*.* might help.-----Original Message----- From: Dan Brummer [mailto:dan.brummer () vegas com] Sent: Monday, May 14, 2007 5:33 PM To: Patrick S. Harper; hhoffman () ip-solutions net Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 Same error on both my RHEL5 servers using 2.6.1.5. I wonder if this is an issue: rpm -qa | grep libpcap libpcap-0.9.4-8.1 libpcap-devel-0.9.4-8.1 libpcap-0.9.4-8.1 It shows two libpcaps installed and it won't let me remove any ofthem.-Dan -----Original Message----- From: Patrick S. Harper [mailto:patrick () internetsecurityguru com] Sent: Monday, May 14, 2007 1:15 PM To: Dan Brummer; hhoffman () ip-solutions net Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 Just tried with snort 2.6.1.5 on RHEL 5 yum'd to date with noRPMforgerepo's installed and it is working. Try the new version and see if that helps. [root@snort snort-2.6.1.5]# snort -V ,,_ -*> Snort! <*- o" )~ Version 2.6.1.5 (Build 59) '''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html (C) Copyright 1998-2007 Sourcefire Inc., et al.-----Original Message----- From: snort-users-bounces () lists sourceforge net [mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Dan Brummer Sent: Monday, May 14, 2007 1:58 PM To: hhoffman () ip-solutions net Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 Verify on libpcap-devel comes back blank. Tried removing it and readding, still same issue. -----Original Message----- From: Harry Hoffman [mailto:hhoffman () ip-solutions net] Sent: Monday, May 14, 2007 11:30 AM To: Dan Brummer Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 I was just emailing back and forth with another person who has/had this same problem. Is libpcap-devel installed on your system? If it is please get a listing of files in the rpm db and verify the integrity of the package. If not intact, please remove and then re-install the -develpackage and see if that works. Verify Files: rpm -V libpcap-devel Cheers, HarryAny ideas on this guys? I'm still unable to get it to work,SELinuxdisabled. I'm thinking about downgrading to RHEL4 but I may run into hardware issues. -Dan -----Original Message----- From: snort-users-bounces () lists sourceforge net [mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Harry Hoffman Sent: Friday, May 11, 2007 5:01 PM Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Unable to install Snort 2.6.1.4 on RHEL5 If you believe it's SELINUX you can check the logs: audit2allow -i /var/log/messages or temporarily disable selinux setenforce 0 HTH, Harry On Fri, 11 May 2007, Patrick S. Harper wrote:Selinux can break a lot of things if not set properly, it takesagoodbit of tweaking Patrick S. Harper | CISSP RHCT MCSE www.internetsecurityguru.com-----Original Message----- From: Peper Gisi [mailto:pgisi () flatironfs com] Sent: Friday, May 11, 2007 3:33 PM To: Dan Brummer; Patrick S. Harper; snort-users () lists sourceforge net Subject: RE: [Snort-users] Unable to install Snort 2.6.1.4 onRHEL5I actually just had the same issue yesterday with CentOS5. I was using Patrick's directions and had to do a couple ofthingsa littledifferent like SELinux comes after the reboot. I have tried everything that I could think of and still get the same errorthatDan is getting.I took the box back to 4.4 and no issues ... except fortimportingthe GPG key for NTOP but that is unrelated. Peper ________________________________ From: snort-users-bounces () lists sourceforge net on behalf of Dan Brummer Sent: Fri 5/11/2007 2:20 PM To: Patrick S. Harper; snort-users () lists sourceforge net Subject: Re: [Snort-users] Unable to install Snort 2.6.1.4 onRHEL5Yea this is very confusing. This is a brand new installation of RHEL5 with the latest updates from RHN via yum. -Dan -----Original Message----- From: Patrick S. Harper[mailto:patrick () internetsecurityguru com]Sent: Friday, May 11, 2007 1:17 PM To: Dan Brummer; snort-users () lists sourceforge net Subject: RE: [Snort-users] Unable to install Snort 2.6.1.4 onRHEL5I have the same setup in my lab and it worked for me. I havenotgotten a copy of the real RHEL 5 yet though, I am running onCentOS5. That should not make a difference though-----Original Message----- From: snort-users-bounces () lists sourceforge net [mailto:snort-users- bounces () lists sourceforge net] OnBehalfOfDan Brummer Sent: Friday, May 11, 2007 1:14 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Unable to install Snort 2.6.1.4 onRHEL5Hello, I'm trying to install Snort 2.6.1.4 from source on a RHEL5server.I get the following error: ERROR! Libpcap library/headers not found I currently have libpcap installed by RPM: rpm -qa |grep libpcap libpcap-0.9.4-8.1 libpcap-devel-0.9.4-8.1 Here's a list of the libpcap files: /usr/include/pcap-bpf.h /usr/include/pcap-namedb.h /usr/include/pcap.h /usr/lib/libpcap.a /usr/lib/libpcap.so /usr/lib/libpcap.so.0 /usr/lib/libpcap.so.0.9 /usr/lib/libpcap.so.0.9.4 I've tried running ./configure with '--with-libpcap- includes=/usr/include --with-libpcap-libraries=/usr/lib' and stillexpierence the error. Any help on this would be greatlyappreciated.Thank you. Daniel Brummer Vegas.com Network Engineer I-------------------------------------------------------------------- --- -- This SF.net email is sponsored by DB2 Express Download DB2ExpressC- the FREE version of DB2 express and take control of yourXML.Nolimits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to changeuseroptions or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users---------------------------------------------------------------------- --- This SF.net email is sponsored by DB2 Express Download DB2 ExpressC - the FREE version of DB2 express and take control of yourXML.Nolimits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2ExpressC-the FREE version of DB2 express and take control of your XML. Nolimits.Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2ExpressC - the FREE version of DB2 express and take control of your XML.Nolimits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 ExpressC- the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Unable to install Snort 2.6.1.4 on RHEL5, (continued)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 11)
- Message not available
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Patrick S. Harper (May 11)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Harry Hoffman (May 11)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 14)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Harry Hoffman (May 14)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 14)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Patrick S. Harper (May 14)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 14)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Patrick S. Harper (May 14)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 16)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Patrick S. Harper (May 16)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 17)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Dan Brummer (May 11)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Alex Butcher (May 15)
- Re: Unable to install Snort 2.6.1.4 on RHEL5 Patrick S. Harper (May 14)