Snort mailing list archives

Re: This is a new one

From: "Atkins, Dwane P" <ATKINSD () uthscsa edu>
Date: Tue, 31 Jul 2007 08:01:45 -0500

Thanks, Joel.  I will do that and start over.


Dwane

 

________________________________

From: Joel Esler [mailto:joel.esler () sourcefire com] 
Sent: Tuesday, July 31, 2007 8:01 AM
To: Atkins, Dwane P
Cc: Atkins, Dwane P; Will Metcalf; Snort-users () lists sourceforge net
Subject: Re: [Snort-users] This is a new one

 

If you are trying to compile from a tarball,  and you haven't moved the
files around,  just delete the expanded directory that the tarball made
when you expanded it.  

 

You can also descend into the directory before you delete it and type
'make uninstall'  which will remove any files it may have moved into the
bin directories,  etc.

--

Joel Esler

Sent from the road.


On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD () uthscsa edu>
wrote:

        Do you think I should start with a fresh system?  Is there a way
to do a complete uninstall of the snort application?  I do not want to
remove base and mysql, just clean up the snort install since I have run
it from two separate directories.

         

        Thanks to all,

        
        Dwane

         

        
________________________________


        From: snort-users-bounces () lists sourceforge net
[mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Atkins,
Dwane P
        Sent: Monday, July 30, 2007 4:10 PM
        To: Will Metcalf
        Cc: <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net
        Subject: Re: [Snort-users] This is a new one

         

        Yes on the checking and no on the -DENABLE_MYSQL.

         

        Do I do a ./configure -with-mysql -enable-dynamic-plugins, make
and then a make distclean?

        
        Dwane

         

        
________________________________


        From: Will Metcalf [mailto:william.metcalf () gmail com] 
        Sent: Friday, July 27, 2007 7:28 PM
        To: Atkins, Dwane P
        Cc: Matt Jonkman; <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net
        Subject: Re: [Snort-users] This is a new one

         

        yeah it just cleans it if you have already built snort.  Do you
see the following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?
        
        checking for mysql... yes
        checking for compress in -lz... yes
        
        and 
        
        -DENABLE_MYSQL 
        
        when you run make?

        On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD () uthscsa edu>
ATKINSD () uthscsa edu> wrote: 

        I just tried that in both directories and received this error:

         

        make: *** No rule to make target `distclean'.  Stop.

         

        Thanks

         

        Dwane

         

        
________________________________


        From: Will Metcalf [mailto: <mailto:william.metcalf () gmail com>
william.metcalf () gmail com] 
        Sent: Friday, July 27, 2007 6:46 PM
        To: Atkins, Dwane P
        Cc: Matt Jonkman; <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net 

        
        Subject: Re: [Snort-users] This is a new one

         

        make distclean && ./configure --with-mysql

        On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD () uthscsa edu>
ATKINSD () uthscsa edu> wrote: 

        I did recompile and still go the same message.  I download the
tarball
        that Will sent out and then I did a ./configure, make and make
install. 
        I then noticed the error and did a ./configure --with-mysql
        --enable-dynamicplugins, make and make install and still
received the
        same error.
        
        Any ideas will be helpful.
        
        Thanks
        
        Dwane
        
        -----Original Message----- 
        From: Matt Jonkman [mailto: <mailto:jonkman () bleedingthreats net>
jonkman () bleedingthreats net]
        Sent: Friday, July 27, 2007 5:58 PM
        To: Will Metcalf
        Cc: Atkins, Dwane P; <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net
        Subject: Re: [Snort-users] This is a new one
        
        Looks like you need to compile with --with-mysql.
        
        Will Metcalf wrote:
        > What exactly did you download?
        >
        > Regards, 
        >
        > Will
        >
        >
        > On 7/27/07, *Atkins, Dwane P* < <mailto:ATKINSD () uthscsa edu>
ATKINSD () uthscsa edu
        > <mailto: <mailto:ATKINSD () uthscsa edu> ATKINSD () uthscsa edu>>
wrote: 
        >
        >     Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this
build of
        >     snort was obtained as a binary distribution (e.g., rpm, or
        Windows),
        >     then check for alternate builds that contains the
necessary 
        'mysql'
        >     support.  If this build of snort was compiled by you, then
re-run
        >     the ./configure script using the '--with-mysql' switch.
For
        >     non-standard installations of a database, the
'--with-mysql=DIR' 
        >     syntax may need to be used to specify the base directory
of the DB
        >     install.  See the database documentation for cursory
details
        >     (doc/README.database). and the URL to the most recent
database 
        >     plugin documentation.
        >
        >
        >
        >     I recently installed the latest snortsam patches and I
have a
        >     feeling that the new patch installs snort.  I am trying to
find
        out
        >     how to get around this.  Maybe someone can help. 
        >
        >
        >
        >     Dwane
        >
        >
        >
        >
        >
        >
        >
        
------------------------------------------------------------------------
        -
        >     This SF.net email is sponsored by: Splunk Inc. 
        >     Still grepping through log files to find problems?  Stop.
        >     Now Search log events and configuration files using AJAX
and a
        browser.
        >     Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
        >     _______________________________________________
        >     Snort-users mailing list
        >     <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net 
        >     <mailto: <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net>
        >     Go to this URL to change user options or unsubscribe:
        >     <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
        >     Snort-users
        >
        <
<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>
https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users >
        >     list archive:
        >     <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
        >     <
<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users>
        >
        >
        >
        >
        
------------------------------------------------------------------------
        >
        >
        
------------------------------------------------------------------------

        -
        > This SF.net email is sponsored by: Splunk Inc.
        > Still grepping through log files to find problems?  Stop.
        > Now Search log events and configuration files using AJAX and a
        browser.
        > Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
        >
        >
        >
        
------------------------------------------------------------------------
        >
        > _______________________________________________ 
        > Snort-users mailing list
        > <mailto:Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net
        > Go to this URL to change user options or unsubscribe:
        > <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
        > Snort-users list archive:
        > <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users 
        
        --
        --------------------------------------------
        Matthew Jonkman
        Bleeding Edge Threats
        US Phone 765-429-0398
        US Fax 312-264-0205
        AUS Phone 61-42-4157-491
        AUS Fax 61-29-4750-026
        <http://www.bleedingthreats.net> http://www.bleedingthreats.net
        --------------------------------------------
        
        PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc

         

         

        --------------------------
        
        PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc

         

         

        
------------------------------------------------------------------------
-
        This SF.net email is sponsored by: Splunk Inc.
        Still grepping through log files to find problems?  Stop.
        Now Search log events and configuration files using AJAX and a
browser.
        Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/

        _______________________________________________
        Snort-users mailing list
        Snort-users () lists sourceforge net
        Go to this URL to change user options or unsubscribe:
        https://lists.sourceforge.net/lists/listinfo/snort-users
        Snort-users list archive:
        http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

Re: This is a new one, (continued)
- Re: This is a new one Will Metcalf (Jul 27)
  - Re: This is a new one Matt Jonkman (Jul 27)
    - Re: This is a new one Atkins, Dwane P (Jul 27)
    - Re: This is a new one Will Metcalf (Jul 27)
    - Re: This is a new one Atkins, Dwane P (Jul 27)
    - Re: This is a new one Atkins, Dwane P (Jul 27)
    - Re: This is a new one Will Metcalf (Jul 27)
    - Re: This is a new one Atkins, Dwane P (Jul 30)
    - Re: This is a new one Atkins, Dwane P (Jul 31)
    - Re: This is a new one Joel Esler (Jul 31)
    - Re: This is a new one Atkins, Dwane P (Jul 31)
    - Re: This is a new one Will Metcalf (Jul 31)
    - Re: This is a new one Atkins, Dwane P (Jul 31)
    - Re: This is a new one Atkins, Dwane P (Jul 31)