Snort mailing list archives

RE: Snort-users digest, Vol 1 #3871 - 5 msgs


From: Guy Witney Krocker <gwkrocker () shaw ca>
Date: Thu, 01 Jan 2004 21:12:47 -0800

yes, and no joy

however I made an additional symlink to libpcre.so.0 in /usr/lib and voila!

thanks
gwk

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
snort-users-request () lists sourceforge net
Sent: Thursday, January 01, 2004 9:09 PM
To: snort-users () lists sourceforge net
Subject: Snort-users digest, Vol 1 #3871 - 5 msgs


Send Snort-users mailing list submissions to
        snort-users () lists sourceforge net

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.sourceforge.net/lists/listinfo/snort-users
or, via email, send a message with subject or body 'help' to
        snort-users-request () lists sourceforge net

You can reach the person managing the list at
        snort-users-admin () lists sourceforge net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-users digest..."


Today's Topics:

   1. libpcre.so.0 error loading shared libraries (Guy Witney Krocker)
   2. barnyard with postgres (Bryan Irvine)
   3. libpcre.so.0 error loading shared libraries (Guy Witney Krocker)
   4. RE: Win32 - multiple interfaces? (Michael Steele)
   5. Re: libpcre.so.0 error loading shared libraries (George Theall)

--__--__--

Message: 1
Date: Thu, 01 Jan 2004 15:02:45 -0800
From: Guy Witney Krocker <gwkrocker () shaw ca>
To: snort-users () lists sourceforge net
Subject: [Snort-users] libpcre.so.0 error loading shared libraries

snort 2.1.0 on debian with mysql
compile failed looking for pcre
installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up

error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory

it is sitting in /usr/local/lib

any ideas?
gwk

sorry if this is a dup post - searched archives.. really



--__--__--

Message: 2
From: Bryan Irvine <bryan.irvine () kingcountyjournal com>
To: 'Snort Users List' <snort-users () lists sourceforge net>
Date: Thu, 01 Jan 2004 15:55:44 -0800
Subject: [Snort-users] barnyard with postgres

I've just upgraded to snort 2.1 (this thresholding thing truely is
amazing!), and now I"d like to revisit the barnyard/postgres deal.

I see the barnyard version # hasn't changed in long time, so I'm
assuming the situation is as before, where all of the postgres stuff is
there but not functional (I think someone called them "stubs").
Anyone know if BY supports postgres yet?

-Bryan




--__--__--

Message: 3
Date: Thu, 01 Jan 2004 15:45:17 -0800
From: Guy Witney Krocker <gwkrocker () shaw ca>
To: snort-users () lists sourceforge net
Subject: [Snort-users] libpcre.so.0 error loading shared libraries


snort 2.1.0 on debian with mysql
compile failed looking for pcre
installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up

error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory

it is sitting in /usr/local/lib

any ideas?
gwk

sorry if this is a dup post - searched archives.. really



--__--__--

Message: 4
From: "Michael Steele" <michaels () winsnort com>
To: "'Snort Users List'" <snort-users () lists sourceforge net>
Subject: RE: [Snort-users] Win32 - multiple interfaces?
Date: Thu, 1 Jan 2004 16:30:07 -0800

Running two Snort services may be as simple as editing the original registry
key for the first instance of Snort, and then run another instance of the
'/SERVICE /INSTALL' command to add it again, being careful not to overwrite
the first instance.

You could also use another service tool like firedeamon or the Microsoft
files you described below.

Note: BACKUP your registry so you can revert back if something gets blown
out.

Kindest regards,

The WINSNORT.com Management Team
--
Pick up your FREE Windows or UNIX Snort installation guides
mailto:support () winsnort com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net [mailto:snort-users-
admin () lists sourceforge net] On Behalf Of Rich Adamson
Sent: Thursday, January 01, 2004 1:09 PM
To: 'Snort Users List'; Scot Scot
Subject: Re: [Snort-users] Win32 - multiple interfaces?

Hi Scot,

Thanks Mike..

Q1: You can't detect two interfaces with one Snort instance.

Note: Throw some more RAM in and run 2 Snorts

I'm going to set up one instance to run as a Service. Are your
instructions
at your site now?

When that's all done, looks like I'll take another run at updating
the README.WIN32 stuff. Been a few changes since I wrote that original
one. :)

Rich

<snip>

How about running both instances as a service?

Here is a recommendation:

Use instsrv.exe and srvany.exe from the NT Resource kit

Step-1, execute the following commands:

instsrv srvany %windir%\srvany.exe
instsrv snort1 %windir%\srvany.exe
instsrv snort2 %windir%\srvany.exe

Step-2, build two .reg files for each snort instance and import them
into
the registry:
(You will have to fill in the %%'s with your own values)

Wouldn't it actually be easier to have a snort1.exe and snort2.exe and
config both to run as a Service? (I haven't tried this, so not sure it
would actually work.)

Rich




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




--__--__--

Message: 5
Date: Thu, 1 Jan 2004 22:31:47 -0500
From: George Theall <theall () tifaware com>
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] libpcre.so.0 error loading shared libraries


--sm4nu43k4a2Rpi4c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jan 01, 2004 at 03:45:17PM -0800, Guy Witney Krocker wrote:

installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up
=20
error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory


Is /usr/local/lib in /etc/ld.so.conf? Have you run ldconfig?

George
--=20
theall () tifaware com

--sm4nu43k4a2Rpi4c
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQE/9OYjsWUciNmuHkURAoNnAJ4h2QxejJBzg8Pn0DktB6gs7ZuC8QCeNr99
VrxuN51ULbbTjn77Qt5qcho=
=736r
-----END PGP SIGNATURE-----

--sm4nu43k4a2Rpi4c--



--__--__--

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-users


End of Snort-users Digest



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: