Snort mailing list archives
Re: This is a new one
From: "Atkins, Dwane P" <ATKINSD () uthscsa edu>
Date: Tue, 31 Jul 2007 11:09:10 -0500
What did was go into my install directory, remove the extracted directories and the untar the snort-snortsam-2.6.1.5.tar.gz, cd to that directory, and then.... ./configure -with-mysql Make Make install Chkconfig snort on Service snort start And it worked. Now let me see if I can get the snortsam agent to communicate with our snortsam box. Thanks folks. Dwane ________________________________ From: snort-users-bounces () lists sourceforge net [mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Atkins, Dwane P Sent: Tuesday, July 31, 2007 10:59 AM To: Will Metcalf Cc: Joel Esler; Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one When I do a make uninstall or make distclean, I get this error make: *** No rule to make target `uninstall'. Stop or make: *** No rule to make target `distclean'. Stop. It doesn't look like anything is installed now, right? ________________________________ From: Will Metcalf [mailto:william.metcalf () gmail com] Sent: Tuesday, July 31, 2007 8:17 AM To: Atkins, Dwane P Cc: Joel Esler; Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one Yeah, you can also re-run ./autojunk.sh from source and try again. You will need the tools included in that script though. Regards, Will On 7/31/07, Atkins, Dwane P <ATKINSD () uthscsa edu> wrote: Thanks, Joel. I will do that and start over. Dwane ________________________________ From: Joel Esler [mailto:joel.esler () sourcefire com] Sent: Tuesday, July 31, 2007 8:01 AM To: Atkins, Dwane P Cc: Atkins, Dwane P; Will Metcalf; Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one If you are trying to compile from a tarball, and you haven't moved the files around, just delete the expanded directory that the tarball made when you expanded it. You can also descend into the directory before you delete it and type 'make uninstall' which will remove any files it may have moved into the bin directories, etc. -- Joel Esler Sent from the road. On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD () uthscsa edu> wrote: Do you think I should start with a fresh system? Is there a way to do a complete uninstall of the snort application? I do not want to remove base and mysql, just clean up the snort install since I have run it from two separate directories. Thanks to all, Dwane ________________________________ From: snort-users-bounces () lists sourceforge net [mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Atkins, Dwane P Sent: Monday, July 30, 2007 4:10 PM To: Will Metcalf Cc: <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one Yes on the checking and no on the -DENABLE_MYSQL. Do I do a ./configure -with-mysql -enable-dynamic-plugins, make and then a make distclean? Dwane ________________________________ From: Will Metcalf [mailto: william.metcalf () gmail com] Sent: Friday, July 27, 2007 7:28 PM To: Atkins, Dwane P Cc: Matt Jonkman; <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one yeah it just cleans it if you have already built snort. Do you see the following when you run ./configure --with-mysql in the snort-snortsam-2.6.1.5 directory? checking for mysql... yes checking for compress in -lz... yes and -DENABLE_MYSQL when you run make? On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD () uthscsa edu> ATKINSD () uthscsa edu <mailto:ATKINSD () uthscsa edu> > wrote: I just tried that in both directories and received this error: make: *** No rule to make target `distclean'. Stop. Thanks Dwane ________________________________ From: Will Metcalf [mailto: <mailto:william.metcalf () gmail com> william.metcalf () gmail com] Sent: Friday, July 27, 2007 6:46 PM To: Atkins, Dwane P Cc: Matt Jonkman; <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one make distclean && ./configure --with-mysql On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD () uthscsa edu> ATKINSD () uthscsa edu <mailto:ATKINSD () uthscsa edu> > wrote: I did recompile and still go the same message. I download the tarball that Will sent out and then I did a ./configure, make and make install. I then noticed the error and did a ./configure --with-mysql --enable-dynamicplugins, make and make install and still received the same error. Any ideas will be helpful. Thanks Dwane -----Original Message----- From: Matt Jonkman [mailto: <mailto:jonkman () bleedingthreats net> jonkman () bleedingthreats net <mailto:jonkman () bleedingthreats net> ] Sent: Friday, July 27, 2007 5:58 PM To: Will Metcalf Cc: Atkins, Dwane P; <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net Subject: Re: [Snort-users] This is a new one Looks like you need to compile with --with-mysql. Will Metcalf wrote: > What exactly did you download? > > Regards, > > Will > > > On 7/27/07, *Atkins, Dwane P* < <mailto:ATKINSD () uthscsa edu> ATKINSD () uthscsa edu <mailto:ATKINSD () uthscsa edu> > <mailto: <mailto:ATKINSD () uthscsa edu> ATKINSD () uthscsa edu <mailto:ATKINSD () uthscsa edu> >> wrote: > > Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this build of > snort was obtained as a binary distribution (e.g., rpm, or Windows), > then check for alternate builds that contains the necessary 'mysql' > support. If this build of snort was compiled by you, then re-run > the ./configure script using the '--with-mysql' switch. For > non-standard installations of a database, the '--with-mysql=DIR' > syntax may need to be used to specify the base directory of the DB > install. See the database documentation for cursory details > (doc/README.database). and the URL to the most recent database > plugin documentation. > > > > I recently installed the latest snortsam patches and I have a > feeling that the new patch installs snort. I am trying to find out > how to get around this. Maybe someone can help. > > > > Dwane > > > > > > > ------------------------------------------------------------------------ - > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> <http://get.splunk.com/> http://get.splunk.com/ > _______________________________________________ > Snort-users mailing list > <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net > <mailto: <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net <mailto:Snort-users () lists sourceforge net> > > Go to this URL to change user options or unsubscribe: > <https://lists.sourceforge.net/lists/listinfo/snort-users> https://lists.sourceforge.net/lists/listinfo/snort-users > Snort-users > < <https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users> https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users <https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users> > > list archive: > <http://www.geocrawler.com/redir-sf.php3?list=snort-users> http://www.geocrawler.com/redir-sf.php3?list=snort-users > < <http://www.geocrawler.com/redir-sf.php3?list=snort-users> http://www.geocrawler.com/redir-sf.php3?list=snort-users> > > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------ - > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> <http://get.splunk.com/> http://get.splunk.com/ > > > ------------------------------------------------------------------------ > > _______________________________________________ > Snort-users mailing list > <mailto:Snort-users () lists sourceforge net> Snort-users () lists sourceforge net > Go to this URL to change user options or unsubscribe: > <https://lists.sourceforge.net/lists/listinfo/snort-users> https://lists.sourceforge.net/lists/listinfo/snort-users > Snort-users list archive: > <http://www.geocrawler.com/redir-sf.php3?list=snort-users> http://www.geocrawler.com/redir-sf.php3?list=snort-users -- -------------------------------------------- Matthew Jonkman Bleeding Edge Threats US Phone 765-429-0398 US Fax 312-264-0205 AUS Phone 61-42-4157-491 AUS Fax 61-29-4750-026 <http://www.bleedingthreats.net> http://www.bleedingthreats.net -------------------------------------------- PGP: <http://www.bleedingthreats.com/mattjonkman.asc> http://www.bleedingthreats.com/mattjonkman.asc -------------------------- PGP: <http://www.bleedingthreats.com/mattjonkman.asc> http://www.bleedingthreats.com/mattjonkman.asc ------------------------------------------------------------------------ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> <http://get.splunk.com/> http://get.splunk.com/ <http://get.splunk.com/> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: This is a new one, (continued)
- Re: This is a new one Will Metcalf (Jul 27)
- Re: This is a new one Atkins, Dwane P (Jul 27)
- Re: This is a new one Atkins, Dwane P (Jul 27)
- Re: This is a new one Will Metcalf (Jul 27)
- Re: This is a new one Atkins, Dwane P (Jul 30)
- Re: This is a new one Atkins, Dwane P (Jul 31)
- Re: This is a new one Joel Esler (Jul 31)
- Re: This is a new one Atkins, Dwane P (Jul 31)
- Re: This is a new one Will Metcalf (Jul 31)
- Re: This is a new one Atkins, Dwane P (Jul 31)
- Re: This is a new one Atkins, Dwane P (Jul 31)