Re: snort 2.0.0 with mysql

[Mike Chandler <mchandl12000 () yahoo com>]

I would go back and install mysql and snort 1.9.1 from
rpm's and get that working.  Then step up to snort
2.0.0. Follow the guide for Redhat 7.3, Mysql and Acid
on the documentation page at www.snort.org.  I'm
certainly no expert but that worked for me.  Upgrading
to snort 2.0 was no real problem until I tried to go
to Redhat 9.0.  Don't doit!  I've had nothing but
troubles.
--- David Alonso De La Vega Tapage
<delavegad () bancoaliado com> wrote:
> if I don't use  mysql in my snort.conf ..  file ..  
> snort function fine 
> ..   the problem  is the mysql support ..
>
>
> Mike Chandler wrote:
>
> > Maybe the snort executeable didn't get copied to
> your
> > executeable directory directory.  You may need to
> copy
> > you Snort-2.0.0/src/snort executeable 
> > /usr/sbin/snort or wherever you have your
> executeable.
> > To test this theory try "snort -V" snort report
> its
> > version.
> >
> > --- David Alonso De La Vega Tapage
> > <delavegad () bancoaliado com> wrote:
> >  
> >
> > > Do all  as you write but ..  the same problem ..
> > > snort can't see the 
> > > mysql suppor in compilation ..
> > >
> > > I thing maybe is a joke ..  simple thing ..  but
> > > what is the thing . ?
> > >
> > > Some other suggestions .. ?
> > >
> > > Thanx for all ..
> > >
> > >
> > > Mike Chandler wrote:
> > >
> > >    
> > >
> > > > I use "./configure --prefix=/usr
> --with-mysql=/usr"
> > > > then "make" and "make install".  
> > > >
> > > > I installed mysql from rpm's that I downloaded
> from
> > > > http://mysql.orst.edu/Downloads.
> > > >
> > > > I have found that make install doesn't copy
> > > >      
> > > everything
> > >    
> > >
> > > > over so you will have to copy your
> snort-2.0.0/etc
> > > > directory to your /etc/snort directory and modify
> > > >      
> > > your
> > >    
> > >
> > > > /etc/rc.d/initd./snortd file.
> > > >
> > > >
> > > > Date: Mon, 21 Apr 2003 11:22:32 -0500
> > > > From: David Alonso De La Vega Tapage
> > > > <delavegad () bancoaliado com>
> > > > To: snort-users () lists sourceforge net
> > > > Subject: [Snort-users] snort 2.0.0 with mysql ..
> > > >
> > > > Hi all ..  and bless . ...
> > > >
> > > > My system  R.H. 7.3 kernel 2.4.18  download snort
> > > > 2.0.0 .tar.gz  + ACID 
> > > > + MYSQL ..
> > > >
> > > > ./configure snort with mysql ..   all appears ok
> ..
> > > >      
> > >
> > >    
> > >
> > > > in the process .. 
> > > > appears " checking for mysql = yes
> > > >
> > > > but ..  when  do  snort -i eth0 -c
> > > > /etc/snort-2.0.0/etc/snort.conf
> > > >
> > > > have the same error ( everybody knows that error 
> )
> > > > snort not compiled 
> > > > with mysql . ..  I prove it with--mysql=/usr/lib
> ..
> > > >      
> > > >
> > > > but also can't 
> > > > function ..
> > > >
> > > > any ideas .. ?
>
> > > __________________________________________________
> > > > Do you Yahoo!?
> > > > The New Yahoo! Search - Faster. Easier. Bingo
> > > > http://search.yahoo.com
> > > >
> > > >
> > > >      
>
> > -------------------------------------------------------
> > >    
> > >
> > > > This sf.net email is sponsored by:ThinkGeek
> > > > Welcome to geek heaven.
> > > > http://thinkgeek.com/sf
> > > > _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users () lists sourceforge net
> > > > Go to this URL to change user options or
> > > >      
> > > unsubscribe:
>
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > >    
> > >
> > > > Snort-users list archive:
> > > >      
>
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >    
> > >
> > > >      
> > >    
> >
> >
> > __________________________________________________
> > Do you Yahoo!?
> > The New Yahoo! Search - Faster. Easier. Bingo
> > http://search.yahoo.com
> >
> >
> >  


__________________________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo
http://search.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users