RE: problem with snort/mysql

[Gisli Helgason <Gisli () gltrade co uk>]

This is the key to your question.
database: mysql support is not compiled in this
copy

You need to compile your own version of snort with the ./configure
--with-mysql option.  You must have MySql installed on the machine you
compile it on.

Hope this helps, Gisli.

-----Original Message-----
From: Sandra Rosada [mailto:sandra.rosada () unipd it]
Sent: 22 October 2001 17:39
To: snort-users () lists sourceforge net
Subject: [Snort-users] problem with snort/mysql


I've installed snort and mysql.
I've given this command
./snort -dev -l ./log -c snort.conf

I've had this error message:
-----------------------------

No arguments to frag2 directive, setting defaults to:

    Fragment timeout: 60 seconds
    Fragment memory cap: 4194304 bytes

Stream4 config:
    Stateful inspection: ACTIVE
    Session statistics:
INACTIVE
  
  Session timeout: 30 seconds
    Session memory cap: 8388608 bytes

State alerts: 
INACTIVE
    Scan alerts: ACTIVE
No arguments to stream4_reassemble,
setting defaults:
 
    Reassemble client: ACTIVE
     Reassemble server: INACTIVE
     
Reassemble ports: 21 23 25 53 80 143 110 111 513
     
Reassembly alerts: ACTIVE
database: mysql support is not compiled in this
copy

 
Check your configuration file to be sure you did not mis-spell "mysql".
 
If you did not, you will need to reconfigure and recompile ensuring that
 
you have set the correct options to the configure script. Type 
 
"./configure --help" to see options for the configure script.

Fatal Error, 
Quitting..
-------------------------------------


I've checked my snort.conf:
---------------------

output database: log, mysql, user=root dbname=snort host=monsley
output database: alert,mysql, user=root dbname=snort

-------------

I've recompiled :
-----------
./configure --with-mysql=/usr/local/mysql

----------

and the check in the output is
check for mysql ... yes
 
and then I run make and make install

but I've had the same error

Can someone suggest me any solution?
Thank you very much
regards 
Sandra


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users