RE: Problems with Snort and MySQL on FreeBSD 5

["Joo Carlos Couto" <jonplas115 () hotmail com>]

Thank You for answering...

Don't worry, I did run "make install" after "make -DWITH_MYSQL" and 
everything went fine. But it simply doesn't work!!!
Let's start again. Boot runs ok, apache initialized, Idled ... , MySQL, ... 
and when it has to come up with Snort, I get the following error:
"If this built of Snort was obtained as a binary distribution (e.g., rpm, or 
Windows) , then check for alternate builds that contains the necessary 
'mysql' support. ..."
So, I don't have the Snort service started.
If I try to start this by hand, using the snort.sh script, it gives me no 
errors and seens to start the service. But I have nothing written in my 
database.



> From: "Schmehl, Paul L" <pauls () utdallas edu>
> To: "Joo Carlos Couto" 
> <jonplas115 () hotmail com>,<snort-users () lists sourceforge net>
> Subject: RE: [Snort-users] Problems with Snort and MySQL on FreeBSD 5
> Date: Mon, 9 Jun 2003 10:18:40 -0500
>
> Don't hit me, OK?  You *did* run "make install" after "make
> -DWITH_MYSQL" didn't you?  And you used "-DWITH_MYSQL" not "DWITH-MYSQL"
> (which is what you typed in this message), right?
>
> If so, it should be working, assuming you have created a user for mysql
> with the correct grants and you've placed that user's id and pass in the
> snort.conf file.
>
> Paul Schmehl (pauls () utdallas edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu/~pauls/
>
> -----Original Message-----
> From: Joo Carlos Couto [mailto:jonplas115 () hotmail com]
> Sent: Monday, June 09, 2003 8:13 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Problems with Snort and MySQL on FreeBSD 5
>
>
> Hi everybody,
>
> I've installed a FreeBSD running Apache, MySQL, Snort and ACID. The
> machine
> starts booting ok, but after MySQL starts, Snort tries to come up but it
>
> stops with an error message. Something like I had installed Snort
> without
> MySQL support.
> I installed Snort through cvsup using "make -DWITH-MYSQL" .
> Ok, the machine starts, but when I try to to start snort manually it
> gives
> me no errors, but just doesn't work.
> I guess my problem is in sending the snort alerts to the MySQL database.
> Does someone have any idea???
>
> _________________________________________________________________
> MSN Hotmail, o maior webmail do Brasil.  http://www.hotmail.com
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
> thread debugger on the planet. Designed with thread debugging features
> you've never dreamed of, try TotalView 6 free at www.etnus.com.
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
> thread debugger on the planet. Designed with thread debugging features
> you've never dreamed of, try TotalView 6 free at www.etnus.com.
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________________
MSN Hotmail, o maior webmail do Brasil.  http://www.hotmail.com



-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users