Re: snort 2.9.0.1 packages for RHEL5.x

["Castle, Shane" <scastle () bouldercounty org>]

I'd love it if you added snortsam and the snortsam mods. Until I replace
my RHEL5 with RHEL6 (RH is really dragging their feet with its release)
or with Fedora 13 or 14 I'm stuck at 2.8.6.0.

--
Shane Castle
Data Security Mgr, Boulder County IT
CISSP GSEC GCIH


-----Original Message-----
From: vincent () cojot name [mailto:vincent () cojot name] 
Sent: Thursday, November 04, 2010 03:51
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort 2.9.0.1 packages for RHEL5.x


Hi everyone,

Since I was unable to locate a proper src.rpm of snort-2.9.0/2.9.0.1 for

RHEL5, I built one myself (along with its requirements). I pushed all my
packages
here: http://vscojot.free.fr/dist/snort/RHEL5
I found several records of people who were using snort-2.9.x under RHEL5

but they didn't mention where/how they had built their packages.

There's nothing specific about my packages except this:

- both the daq and snort src.rpm were taken from snort.org and adapted
to 
use libpcap1 in a non-standard location (/usr/lib64/libpcap1/lib64 for
x86_64).

- libpcap1 uses libpcap-1.1.1 and attempts to install without changing
the 
el5 defaults (libpcap.so still points to libpcap.so.0.9.4). Still, any
application that uses libpcap.so.1 will run fine thanks to the symlinks 
under /usr/{lib,lib64}.

- The libdnet stuff comes from EPEL.

I hope this helps someone.. I'd apreciate feedback if these snort
packages 
do work for you (I'm not a snort user, I built these for another team).

Vincent

Here's the pkg list:

dist/snort/RHEL5/SRPMS/libpcap1-1.1.1-5.el5.src.rpm
dist/snort/RHEL5/SRPMS/snort-2.9.0-1.el5.src.rpm
dist/snort/RHEL5/SRPMS/daq-0.2-1.el5.src.rpm
dist/snort/RHEL5/SRPMS/snort-2.9.0.1-1.el5.src.rpm
dist/snort/RHEL5/SRPMS/daq-0.3-2.el5.src.rpm
dist/snort/RHEL5/SRPMS/libdnet-1.12-6.el5.src.rpm
dist/snort/RHEL5/i386/libpcap1-1.1.1-5.el5.i386.rpm
dist/snort/RHEL5/i386/daq-debuginfo-0.3-2.el5.i386.rpm
dist/snort/RHEL5/i386/snort-2.9.0.1-1.el5.i386.rpm
dist/snort/RHEL5/i386/libpcap1-debuginfo-1.1.1-5.el5.i386.rpm
dist/snort/RHEL5/i386/libdnet-1.12-6.el5.i386.rpm
dist/snort/RHEL5/i386/libpcap1-devel-1.1.1-5.el5.i386.rpm
dist/snort/RHEL5/i386/snort-mysql-2.9.0.1-1.el5.i386.rpm
dist/snort/RHEL5/i386/snort-debuginfo-2.9.0.1-1.el5.i386.rpm
dist/snort/RHEL5/i386/libdnet-progs-1.12-6.el5.i386.rpm
dist/snort/RHEL5/i386/daq-0.3-2.el5.i386.rpm
dist/snort/RHEL5/i386/libdnet-devel-1.12-6.el5.i386.rpm
dist/snort/RHEL5/x86_64/snort-mysql-2.9.0.1-1.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libpcap1-1.1.1-5.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libpcap1-devel-1.1.1-5.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libpcap1-debuginfo-1.1.1-5.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/daq-0.3-2.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libdnet-devel-1.12-6.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libdnet-1.12-6.el5.i386.rpm
dist/snort/RHEL5/x86_64/libdnet-progs-1.12-6.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/snort-2.9.0.1-1.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libdnet-1.12-6.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/libdnet-devel-1.12-6.el5.i386.rpm
dist/snort/RHEL5/x86_64/daq-debuginfo-0.3-2.el5.x86_64.rpm
dist/snort/RHEL5/x86_64/snort-debuginfo-2.9.0.1-1.el5.x86_64.rpm


------------------------------------------------------------------------
------
The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
http://p.sf.net/sfu/SAP-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
http://p.sf.net/sfu/SAP-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users