Snort mailing list archives

Previous By Date Next
Previous By Thread Next

Re: problem starting snort..kindly help

From: Joel Esler <joel.esler () sourcefire com>
Date: Mon, 28 May 2007 20:00:03 -0400
I am looking at your history file here, and it looks like you descended into the snort dir, and did a config, but you never did a make nor a make install. 

Kinda need to do that.



joel esler | security consultant | Sourcefire | pgp  key is public



On May 28, 2007, at 7:26 PM, pearl carlo wrote:


Hi Scott, atkins, and rmkml
here is what i did after downloading the required packages to / local/usr/src 

43  cd /usr/local
   44  tar zxvf src/pcre-7.1.tar.gz
   45  cd pcre-7.1
   46  ./configure
   47  make
   48  make install
   49  cd ..
   50  tar zxvf src/libnet-1.0.2a.tar.gz
   51  cd Libnet-1.0.2a/
   52  ./configure
   53  make
   54  make install
   55  cd ..
   56  tar zxvf src/libpcap-0.9.4.tar.gz
   57  cd libpcap-0.9.4/
   58  ./configure
   59  make
   60  make install
   61  cd ..
   62  tar zxvf src/snort-2.6.1.5.tar.gz
   63  cd snort-2.6.1.5/

In between here i installed mysql through rpm (devel and admin)
78 ./configure --enable-flexresp --with-mysql --enable- dynamicplugin 
   79  mkdir /etc/snort
   80  mkdir /var/log/snort
81 tar zxvf /usr/local/src/snortrules-snapshot-CURRENT.tar.gz - C /etc/snort 
   82  cp etc/*.conf* /etc/snort
   83  cp etc/*.map /etc/snort
   84  ln -s /usr/local/bin/snort /usr/sbin/snort
   85  groupadd snort
   86  useradd -g snort snort
   87  chown snort:snort /var/log/snort
   88  vi /etc/snort/snort.conf
   89  vi /etc/snort/snort.conf
 here i have chaged the RULE_PATH in the snort.conf file



  112  service mysqld status
  113  service mysqld start
here i had some problems related to mysql , sorted those out and continued 
setting mysql
it took the schema and no problems creating database here

  164  /usr/local/bin/snort -c /etc/snort/snort.conf
 at this stage i get the message
bash: /usr/local/bin/snort: No such file or directory

  whereis snort
or
whereis snort.conf
gives me
snort: /usr/sbin/snort /etc/snort

and if i give
/usr/sbin/snort -c /etc/snort/snort.conf i get the follwing
bash: /usr/local/bin/snort: No such file or directory

tail -f /var/log/messages gives me following

May 28 15:54:53 localhost last message repeated 50 times
May 28 15:55:55 localhost last message repeated 50 times
May 28 15:56:57 localhost last message repeated 50 times
May 28 15:57:59 localhost last message repeated 50 times
May 28 15:59:01 localhost last message repeated 50 times
May 28 16:00:03 localhost last message repeated 50 times
May 28 16:01:05 localhost last message repeated 50 times
May 28 16:02:07 localhost last message repeated 50 times
May 28 16:03:09 localhost last message repeated 50 times
May 28 16:04:11 localhost last message repeated 50 times
Is it that i need to uninstall the packages and relaod the rpm based version.. can somebody give me clue to progress further and give me some idea what is going on and where could be the mistake... 

appreciating for your time ..

pearl






"Atkins, Dwane P" <ATKINSD () uthscsa edu> wrote:
Pearl,
If you do a tail -f /var/log/messages, do you see any errors? Did you try and reconfigure it with the --with-mysql? 


From: pearl carlo [mailto:pearlcarlo () yahoo com]
Sent: Mon 5/28/2007 1:29 AM
To: Atkins, Dwane P
Subject: RE: [Snort-users] problem starting snort..kindly help

i am trying to install snort 2.6.1.5


"Atkins, Dwane P" <ATKINSD () uthscsa edu> wrote:

What version are you trying to install? I can only guess since I am
rather new, but you may want to attempt to ./configure --with-mysql
Make
Make install


-----Original Message-----
From: snort-users-bounces () lists sourceforge net
[mailto:snort-users-bounces () lists sourceforge net] On Behalf Of pearl
carlo
Sent: Sunday, May 27, 2007 10:29 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] problem starting snort..kindly help

hi all
i have installed all the required packages and has set up the database
also successfully in mysql but now after doing all the hardwork when i
am trying to start the snort by writing the following
/usr/local/bin/snort -c /etc/snort/snort.conf

i get the following message ..i am unable to understand what i am
missing
bash: /usr/local/bin/snort: No such file or directory
and when i cd to directory structure ....it really do not exist...i hope 
that is suppose to be created by snort during installation..

kindly help..i have wasted quite a time on that
pearl


________________________________

Bored stiff?
Loosen up...
Download and play hundreds of games for free
on Yahoo!
Games.
Be a better Globetrotter. Get better travel answers from someone who knows. 
Yahoo! Answers - Check it out.


Need a vacation? Get great deals to amazing places on Yahoo! Travel.
---------------------------------------------------------------------- --- 
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/ _______________________________________________ 
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Previous By Date Next
Previous By Thread Next

Current thread: