RE: Little install dilemma

[Greg Herlein <gherlein () herlein com>]

You will need to tell configure where the libpcap inclused and
libraries are on your system.  I'd recommend getting fresh copies
and installing them, then do read the INSTALL file for snort:

`--with-libpcap-includes=DIR'
     If the configuration script can't find the libpcap include
files on its
     own, the path can be set manually with this switch.
 
`--with-libpcap-libraries=DIR'
     If the configuration script can't find the libpcap library
files on its
     own, the path can be set manually with this switch.

This will tell it where to get the needed files to do the build.

Greg

On Sun, 9 Sep 2001, Jason Lewis wrote:

> libpcap.
>
> Use the latest version from www.tcpdump.org
>
> Jason Lewis
> http://www.packetnexus.com
> It's not secure "Because they told me it was secure".
> The people at the other end of the link know less
> about security than you do. And that's scary.
>
>   -----Original Message-----
>   From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net]On Behalf Of Tim
>   Sent: Sunday, September 09, 2001 12:29 PM
>   To: Snort Team
>   Subject: [Snort-users] Little install dilemma
>
>
>   Hello ppl,
>
>   I'm perplexed...and...in need of your assistance. I have been able to
> install snort on my machine at home with no probs.
>
>   I felt confident and wanted to install it at the office where I can do
> real monitoring on a production network where I can learn intrusion
> detection confidently and with the blessings of the powers that be in my
> department. Well things did not go well during my installation, I have
> looked at all possible documentation to no avail.
>
>   It looks like something is missing from my RH 7.1 installation but I'm not
> sure what it is. Would you folks please look at the screen prints [enclosed]
> of the results when I type the commands ./configure, make and make install.
> To someone more savvy in "C" than I, it would probably be obvious why Iam
> not able to install snort on this machine. As always your input to resolving
> this little install dilemma will be gratefully appreciated.
>
>   --snip--
>
>   root@localhost snort-1.8.1-RELEASE]# ./configure
>   creating cache ./config.cache
>   checking for a BSD compatible install... /usr/bin/install -c
>   checking whether build environment is sane... yes
>   checking whether make sets ${MAKE}... yes
>   checking for working aclocal... found
>   checking for working autoconf... found
>   checking for working automake... found
>   checking for working autoheader... found
>   checking for working makeinfo... found
>   checking for gcc... gcc
>   checking whether the C compiler (gcc  ) works... yes
>   checking whether the C compiler (gcc  ) is a cross-compiler... no
>   checking whether we are using GNU C... yes
>   checking whether gcc accepts -g... yes
>   checking for gcc option to accept ANSI C... none needed
>   checking for gcc... (cached) gcc
>   checking whether the C compiler (gcc -g -O2 ) works... yes
>   checking whether the C compiler (gcc -g -O2 ) is a cross-compiler... no
>   checking whether we are using GNU C... (cached) yes
>   checking whether gcc accepts -g... (cached) yes
>   checking host system type... i686-pc-linux-gnu
>   checking whether byte ordering is bigendian... no
>   checking how to run the C preprocessor... gcc -E
>   checking for strings.h... yes
>   checking for string.h... yes
>   checking for stdlib.h... yes
>   checking for unistd.h... yes
>   checking for sys/sockio.h... no
>   checking for paths.h... yes
>   checking for inet_ntoa in -lnsl... yes
>   checking for socket in -lsocket... no
>   checking whether printf must be declared... no
>   checking whether fprintf must be declared... no
>   checking whether syslog must be declared... no
>   checking whether puts must be declared... no
>   checking whether fputs must be declared... no
>   checking whether fputc must be declared... no
>   checking whether fopen must be declared... no
>   checking whether fclose must be declared... no
>   checking whether fwrite must be declared... no
>   checking whether fflush must be declared... no
>   checking whether getopt must be declared... no
>   checking whether bzero must be declared... no
>   checking whether bcopy must be declared... no
>   checking whether memset must be declared... no
>   checking whether strtol must be declared... no
>   checking whether strcasecmp must be declared... no
>   checking whether strncasecmp must be declared... no
>   checking whether strerror must be declared... no
>   checking whether perror must be declared... no
>   checking whether socket must be declared... no
>   checking whether sendto must be declared... no
>   checking whether vsnprintf must be declared... no
>   checking whether snprintf must be declared... no
>   checking whether strtoul must be declared... no
>   checking for snprintf... yes
>   checking for strlcpy... no
>   checking for strlcat... no
>   checking for strerror... yes
>   checking for floor in -lm... yes
>   checking for pcap_datalink in -lpcap... yes
>   checking for mysql... no
>   checking for odbc... no
>   checking for postgresql... no
>   checking for oracle... no
>   checking for openssl... yes
>   checking for u_int8_t... yes
>   checking for u_int16_t... yes
>   checking for u_int32_t... yes
>   checking for a BSD compatible install... /usr/bin/install -c
>   updating cache ./config.cache
>   creating ./config.status
>   creating Makefile
>   creating config.h
>
>
>
>   [root@localhost snort-1.8.1-RELEASE]# make
>   cd . && automake --foreign Makefile
>   cd . \
>     && CONFIG_FILES=Makefile CONFIG_HEADERS= /bin/sh ./config.status
>   creating Makefile
>
>
> gcc -DHAVE_CONFIG_H -I. -I. -I. -I/usr/include/pcap  -DENABLE_SSL  -g -O2 -W
> all -c snort.c
>   In file included from snort.c:45:
>   snort.h:31:18: pcap.h: No such file or directory
>   snort.h:32:21: net/bpf.h: No such file or directory
>   In file included from snort.c:45:
>   snort.h:69:25: pcap-namedb.h: No such file or directory
>   In file included from snort.h:194,
>                    from snort.c:45:
>   decode.h:30:18: pcap.h: No such file or directory
>   In file included from snort.h:194,
>                    from snort.c:45:
>   decode.h:48:25: pcap-namedb.h: No such file or directory
>   make: *** [snort.o] Error 1
>
>
>   [root@localhost snort-1.8.1-RELEASE]# make install
>
>
> gcc -DHAVE_CONFIG_H -I. -I. -I. -I/usr/include/pcap  -DENABLE_SSL  -g -O2 -W
> all -c snort.c
>   In file included from snort.c:45:
>   snort.h:31:18: pcap.h: No such file or directory
>   snort.h:32:21: net/bpf.h: No such file or directory
>   In file included from snort.c:45:
>   snort.h:69:25: pcap-namedb.h: No such file or directory
>   In file included from snort.h:194,
>                    from snort.c:45:
>   decode.h:30:18: pcap.h: No such file or directory
>   In file included from snort.h:194,
>                    from snort.c:45:
>   decode.h:48:25: pcap-namedb.h: No such file or directory
>   make: *** [snort.o] E
>
>   --snip--
>
>   ---
>   Tim -- Mia/Fla.
>   --
>
>             -------------
>          I prefer to be a dreamer
>            among the humblest,
>        with visions to be realized,
>      than a lord among those without
>           dreams and desires.
>              ------------






_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users