Re: snort 2.0.0 with mysql

[David Alonso De La Vega Tapage <delavegad () bancoaliado com>]

Yes I mead thats the option ..  !  rpm ..  is fantastic ..  

well  I try to do it one more time ..  and if it not function ..  go 
with 1.9.1 rpm ..

Thanx for all ..  and your time ..  

Regards,

David Alonso
Panamá


> I would go back and install mysql and snort 1.9.1 from
> rpm's and get that working.  Then step up to snort
> 2.0.0. Follow the guide for Redhat 7.3, Mysql and Acid
> on the documentation page at www.snort.org.  I'm
> certainly no expert but that worked for me.  Upgrading
> to snort 2.0 was no real problem until I tried to go
> to Redhat 9.0.  Don't doit!  I've had nothing but
> troubles.
> --- David Alonso De La Vega Tapage
> <delavegad () bancoaliado com> wrote:
>  
>
> > if I don't use  mysql in my snort.conf ..  file ..  
> > snort function fine 
> > ..   the problem  is the mysql support ..
> >
> >
> > Mike Chandler wrote:
> >
> >    
> >
> > > Maybe the snort executeable didn't get copied to
> > >      
> > your
> >    
> >
> > > executeable directory directory.  You may need to
> > >      
> > copy
> >    
> >
> > > you Snort-2.0.0/src/snort executeable 
> > > /usr/sbin/snort or wherever you have your
> > >      
> > executeable.
> >    
> >
> > > To test this theory try "snort -V" snort report
> > >      
> > its
> >    
> >
> > > version.
> > >
> > > --- David Alonso De La Vega Tapage
> > > <delavegad () bancoaliado com> wrote:
> > >
> > >
> > >      
> > >
> > > > Do all  as you write but ..  the same problem ..
> > > > snort can't see the 
> > > > mysql suppor in compilation ..
> > > >
> > > > I thing maybe is a joke ..  simple thing ..  but
> > > > what is the thing . ?
> > > >
> > > > Some other suggestions .. ?
> > > >
> > > > Thanx for all ..
> > > >
> > > >
> > > > Mike Chandler wrote:
> > > >
> > > >   
> > > >
> > > >        
> > > >
> > > > > I use "./configure --prefix=/usr
> > > > >          
> > --with-mysql=/usr"
> >    
> >
> > > > > then "make" and "make install".  
> > > > >
> > > > > I installed mysql from rpm's that I downloaded
> > > > >          
> > from
> >    
> >
> > > > > http://mysql.orst.edu/Downloads.
> > > > >
> > > > > I have found that make install doesn't copy
> > > > >     
> > > > >
> > > > >          
> > > > everything
> > > >   
> > > >
> > > >        
> > > >
> > > > > over so you will have to copy your
> > > > >          
> > snort-2.0.0/etc
> >    
> >
> > > > > directory to your /etc/snort directory and modify
> > > > >     
> > > > >
> > > > >          
> > > > your
> > > >   
> > > >
> > > >        
> > > >
> > > > > /etc/rc.d/initd./snortd file.
> > > > >
> > > > >
> > > > > Date: Mon, 21 Apr 2003 11:22:32 -0500
> > > > > From: David Alonso De La Vega Tapage
> > > > > <delavegad () bancoaliado com>
> > > > > To: snort-users () lists sourceforge net
> > > > > Subject: [Snort-users] snort 2.0.0 with mysql ..
> > > > >
> > > > > Hi all ..  and bless . ...
> > > > >
> > > > > My system  R.H. 7.3 kernel 2.4.18  download snort
> > > > > 2.0.0 .tar.gz  + ACID 
> > > > > + MYSQL ..
> > > > >
> > > > > ./configure snort with mysql ..   all appears ok
> > > > >          
> > ..
> >    
> >
> > > > >     
> > > > >
> > > > >          
> > > >   
> > > >
> > > >        
> > > >
> > > > > in the process .. 
> > > > > appears " checking for mysql = yes
> > > > >
> > > > > but ..  when  do  snort -i eth0 -c
> > > > > /etc/snort-2.0.0/etc/snort.conf
> > > > >
> > > > > have the same error ( everybody knows that error 
> > > > >          
> > )
> >    
> >
> > > > > snort not compiled 
> > > > > with mysql . ..  I prove it with--mysql=/usr/lib
> > > > >          
> > ..
> >    
> >
> > > > >     
> > > > >
> > > > > but also can't 
> > > > > function ..
> > > > >
> > > > > any ideas .. ?
> > > > >
> > > > >
> > > > >          
> > > > __________________________________________________
> > > >        
> > > >
> > > > > Do you Yahoo!?
> > > > > The New Yahoo! Search - Faster. Easier. Bingo
> > > > > http://search.yahoo.com
> > > > >
> > > > >
> > > > >     
> > > > >
> > > > >          
> > > -------------------------------------------------------
> > >      
> > >
> > > >   
> > > >
> > > >        
> > > >
> > > > > This sf.net email is sponsored by:ThinkGeek
> > > > > Welcome to geek heaven.
> > > > > http://thinkgeek.com/sf
> > > > > _______________________________________________
> > > > > Snort-users mailing list
> > > > > Snort-users () lists sourceforge net
> > > > > Go to this URL to change user options or
> > > > >     
> > > > >
> > > > >          
> > > > unsubscribe:
> > > >
> > > >        
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > >      
> > >
> > > >   
> > > >
> > > >        
> > > >
> > > > > Snort-users list archive:
> > > > >     
> > > > >
> > > > >          
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >      
> > >
> > > >   
> > > >
> > > >        
> > > >
> > > > >     
> > > > >
> > > > >          
> > > >   
> > > >
> > > >        
> > > __________________________________________________
> > > Do you Yahoo!?
> > > The New Yahoo! Search - Faster. Easier. Bingo
> > > http://search.yahoo.com
> > >
> > >
> > >
> > >
> > >      
> >    
>
>
> __________________________________________________
> Do you Yahoo!?
> The New Yahoo! Search - Faster. Easier. Bingo
> http://search.yahoo.com
>
>
>