Snort mailing list archives
RE: Help!
From: <Kim.Sassaman () cox com>
Date: Wed, 16 Jun 2004 13:15:06 -0700
My issue has been resolved. Thanks to everyones input. Each "try this" got me closer to the root of the issue. I had two versions of MySql installed one was a binary install and the second one was a source install. Snort wouldnt compile under the binary and had library sharing violations with the source install. Once that was resolved through changing some PATH statements I got snort dumping to MySql. Then Acid wouldnt connect to mysql cause the mysql.sock file had gotten corrupted. I created a symlink to the .sock file for the source install in the directory that acid was expecting it to be and all is well. :) Kim Sassaman CISSP - CCNP "Research is what I'm doing when I don't know what I'm doing." - Wernher Von Braun (1912-1977) -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net]On Behalf Of David Sent: Wednesday, June 16, 2004 6:14 AM To: Sassaman, Kim (CCI-Phoenix); snort-users () lists sourceforge net Subject: RE: [Snort-users] Help! Hey Kim, Not sure if this will help, but is your libmysqlclient.a library in a non-standard location? if it is you may need to add it to your search path before you run the configure script. For us, the libmysqlclient.a library was in /usr/local/mysql/lib/mysql/ and this needed to be added to our LIBPATH environment variable in order for it to be found. I'm not that familiar with redhat, but I think if you do this: export LIBPATH=$LIBPATH:/usr/local/mysql/lib/mysql ( replace /usr/local/mysql/lib/mysql with where your library is.) Just a thought! Hope it helps, though it may not.... Dave --- On Tue 06/15, < Kim.Sassaman () cox com > wrote: From: [mailto: Kim.Sassaman () cox com] To: snort-users () lists sourceforge net Date: Tue, 15 Jun 2004 14:45:13 -0700 Subject: [Snort-users] Help! I have setup mysql, acid, and snort on a redhat 9 box with apache. Everything is working, mysql has the snort db and acid is up and running... thing is when i launch snort i get the following: elnet_decode arguments: Ports to decode telnet on: 21 23 25 119 database: compiled support for ( ) database: configured to use mysql database: 'mysql' support is not compiled into this build of snort ERROR: If this build of snort was obtained as a binary distribution (e.g., rpm, or Windows), then check for alternate builds that contains the necessary 'mysql' support. If this build of snort was compiled by you, then re-run the the ./configure script using the '--with-mysql' switch. For non-standard installations of a database, the '--with-mysql=DIR' syntax may need to be used to specify the base directory of the DB install. See the database documentation for cursory details (doc/README.database). and the URL to the most recent database plugin documentation. Fatal Error, Quitting.. [root@ip68-231-82-63 snort-2.1.3]# I have compiled recompiled re downloaded the source and removed binaries created in the process to ensure that /configure --with-mysql /configure --with-mysql=DIR to no avail.... i keep getting the same error... help! Kim Sassaman CISSP - CCNP Data Network Engineer Cox Communications - Phoenix 1550 West Deer Valley Road Phoenix, Arizona 85027 Mobile: 602 694 1429 Desk: 623 328 3418 Pager: 888-831-4009 "Research is what I'm doing when I don't know what I'm doing." - Wernher Von Braun (1912-1977) ------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Join Excite! - http://www.excite.com The most personalized portal on the Web! ------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users