Snort mailing list archives

RE: SNMP Support in FreeBSD


From: Keith Long <keith.long () air2web com>
Date: Fri, 24 Oct 2003 12:20:20 -0400

Thanks for the tip Alexey.  I grabbed automake 1.6.3 from gnu.org and
compiled from source.  I was then able to compile snmp support into snort.
I started up snort and then got syntax errors for the trap section in
snort.conf.  So, I dig some digging (the -c community switch is needed but
not documented) and now have the following line in snort.conf.

output trap_snmp: alert, 1, trap -v 2c -p 162 -c supersecret
nms.mydomain.com

Snort now starts without error.  However, I am not getting any traps sent to
my network management station.  When running tcpdump I don't even see any
traps going out, even though there are tons of alerts incrementing.

Once again I ask for help from you snorters.  What am I missing here?
Besides my sanity!

TIA,

Keith

-----Original Message-----
From: Alexey Kuzmenko [mailto:ask () un kiev ua] 
Sent: Wednesday, October 22, 2003 4:14 AM
To: snort-users () lists sourceforge net
Cc: 'snort-users () lists sourceforge net'
Subject: Re: [Snort-users] SNMP Support in FreeBSD

Hello Keith,

Tuesday, October 21, 2003, 6:38:34 PM, you wrote:

KL> I need to build snort with SNMP support on a FreeBSD machine running 4.8
KL> Stable.  I tried installing from ports with -DWITH_SNMP but this does
not
KL> compile with SNMP support.  I then tried to install from source, 2.0.1
with
KL> the debug switch, and get an error during make.  The error I get is:
 
KL> aclocal-1.6: not found

I've got the same problem with patched snort to support spade plugin.
But the error was with automake-1.6 I've managed this problem only
after inslation of automake-1.6 from GNU sources but not from FreeBSD
ports (there isn't 1.6 version in the ports collection) but now my
snort generates core dumps :-(
 



-- 
Alexey Kuzmenko
CCNA
System Administrator
UN House in Ukraine



-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: