Snort mailing list archives

Re: Weird happenings


From: "JOSH RIVEL, BLOOMBERG/ 731 LEXIN" <jrivel () bloomberg net>
Date: 20 Apr 2010 12:44:48 -0400

try the following command as root:
find / -name snort -print
and see what it returns
Seems to me like you just can't find snort in your $PATH.

----- Original Message -----
From: redwookie () gmail com
To: rcombs () sourcefire com, redwookie () gmail com
Cc: snort-users () lists sourceforge net
At:  4/20 12:36:49

Sorry for the delayed response.
no I cannot execute snort -V in any location, be it src or otherwise.
I did the config, make and make install as root.
rrgggh.
-Erik

On Apr 19, 2010 2:57pm, Russ Combs <rcombs () sourcefire com> wrote:
Can you execute src/snort -V?

Did you sudo make install?

On Mon, Apr 19, 2010 at 2:43 PM, Red Wookie redwookie () gmail com> wrote:

Output of which snort:

/usr/bin/which: no snort in

(/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin)



So this is telling me that even though I did a make install, it did

not in fact, install anywhere? So where did I go wrong with this? It

was working two weeks ago and something happened (maybe a RHEL update)

and now this.



Getting ready to format reinstall if I can't figure this out.



-Erik




On Mon, Apr 19, 2010 at 12:37, Russ Combs rcombs () sourcefire com> wrote:

Are you trying to start Snort with a script? What is the path it is  
using?

By default, you should find snort in /usr/local/bin. Does `which snort`

find a snort in the place you/your script expects?



On Mon, Apr 19, 2010 at 12:17 PM, redwookie () gmail com> wrote:



I appreciate the obvious suggestions. I redid everything, starting with

make distclean. ./configure --enable-inline --enable-sourcefire

--enable-reload. make. make install.



Same results - command not found.

-Erik



On Apr 19, 2010 11:29am, Joel Esler jesler () sourcefire com> wrote:

Did you run "make install"?







Don't want to ask the obvious questions, but sometimes it's the  
little

things that we miss.







--



Sent from my iPad



AIM: eslerjoel







On Apr 19, 2010, at 10:58 AM, redwookie () gmail com wrote:







Sorry, I remember that now. Though I had already saved that, but  
seems

I was wrong.



Anyway, I was able to successfully configure and make, but when all

said and done, it is still giving me the "-bash: snort: command  
not found"

problem.



-Erik







On Apr 19, 2010 10:44am, Russ Combs rcombs () sourcefire com> wrote:



This one came up before ... try adding this line to the inline.c

includes:







#include







Snort has to work around a broken include.







Russ







On Mon, Apr 19, 2010 at 8:43 AM, redwookie () gmail com> wrote:







I had set-up a Snort box running on RHEL 5.4 and all was good.  
Now

it is a few weeks alter, and I am not sure what happened but I  
went to check

the Snort and it was not running. When I tried to restart, I go  
the error:

"-bash: snort: command not found". Not knowing what could've  
happened,

because all the files and configs and what-not are where I  
expect them to

be. So I tried to recompile (make distclean, ./configure  
--enable-sourcefire

--enable-reload --enable-inline), thinking a recent RHEL update  
may have

messed things up, and during the make I get the following:







inline.c: In function âRejectLayer2â:



inline.c:591: error: dereferencing pointer to incomplete type



make[3]: *** [inline.o] Error 1



HUH? Any ideas on what's going on here and how do i fix this so I

can get this back online?







V/r,



Erik





 
------------------------------------------------------------------------------







Download Intel® Parallel Studio Eval







Try the new software tools for yourself. Speed compiling, find  
bugs







proactively, and fine-tune applications for parallel performance.







See why Intel Parallel Studio got high marks during beta.







http://p.sf.net/sfu/intel-sw-dev



_______________________________________________







Snort-users mailing list







Snort-users () lists sourceforge net







Go to this URL to change user options or unsubscribe:







https://lists.sourceforge.net/lists/listinfo/snort-users







Snort-users list archive:







http://www.geocrawler.com/redir-sf.php3?list=snort-users

















 
------------------------------------------------------------------------------



Download Intel® Parallel Studio Eval



Try the new software tools for yourself. Speed compiling, find bugs



proactively, and fine-tune applications for parallel performance.



See why Intel Parallel Studio got high marks during beta.



http://p.sf.net/sfu/intel-sw-dev



_______________________________________________



Snort-users mailing list



Snort-users () lists sourceforge net



Go to this URL to change user options or unsubscribe:



https://lists.sourceforge.net/lists/listinfo/snort-users



Snort-users list archive:



http://www.geocrawler.com/redir-sf.php3?list=snort-users













--

http://www.linkedin.com/in/ekmartin

Attachment: 3972468803841002.txt
Description:

Attachment: 10715957699708003.txt
Description:

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: