Snort mailing list archives

Re: This is a new one


From: "Will Metcalf" <william.metcalf () gmail com>
Date: Tue, 31 Jul 2007 08:16:55 -0500

Yeah, you can also re-run ./autojunk.sh  from  source and try again.  You
will need the tools included in that script though.

Regards,

Will

On 7/31/07, Atkins, Dwane P <ATKINSD () uthscsa edu> wrote:

 Thanks, Joel.  I will do that and start over.


Dwane


 ------------------------------

*From:* Joel Esler [mailto:joel.esler () sourcefire com]
*Sent:* Tuesday, July 31, 2007 8:01 AM
*To:* Atkins, Dwane P
*Cc:* Atkins, Dwane P; Will Metcalf; Snort-users () lists sourceforge net
*Subject:* Re: [Snort-users] This is a new one



If you are trying to compile from a tarball,  and you haven't moved the
files around,  just delete the expanded directory that the tarball made when
you expanded it.



You can also descend into the directory before you delete it and type
'make uninstall'  which will remove any files it may have moved into the bin
directories,  etc.

--

Joel Esler

Sent from the road.


On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD () uthscsa edu>
wrote:

 Do you think I should start with a fresh system?  Is there a way to do a
complete uninstall of the snort application?  I do not want to remove base
and mysql, just clean up the snort install since I have run it from two
separate directories.



Thanks to all,


Dwane


 ------------------------------

*From:* snort-users-bounces () lists sourceforge net [mailto:
snort-users-bounces () lists sourceforge net] *On Behalf Of *Atkins, Dwane P
*Sent:* Monday, July 30, 2007 4:10 PM
*To:* Will Metcalf
*Cc:* <Snort-users () lists sourceforge net>Snort-users () lists sourceforge net
*Subject:* Re: [Snort-users] This is a new one



Yes on the checking and no on the –DENABLE_MYSQL.



Do I do a ./configure –with-mysql –enable-dynamic-plugins, make and then a
make distclean?


Dwane


 ------------------------------

*From:* Will Metcalf [mailto:william.metcalf () gmail com]
*Sent:* Friday, July 27, 2007 7:28 PM
*To:* Atkins, Dwane P
*Cc:* Matt Jonkman; <Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net
*Subject:* Re: [Snort-users] This is a new one



yeah it just cleans it if you have already built snort.  Do you see the
following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?

checking for mysql... yes
checking for compress in -lz... yes

and

-DENABLE_MYSQL

when you run make?

On 7/27/07, *Atkins, Dwane P* < <ATKINSD () uthscsa edu>ATKINSD () uthscsa edu>
wrote:

I just tried that in both directories and received this error:



make: *** No rule to make target `distclean'.  Stop.



Thanks



Dwane


 ------------------------------

*From:* Will Metcalf [mailto: <william.metcalf () gmail com>
william.metcalf () gmail com]
*Sent:* Friday, July 27, 2007 6:46 PM
*To:* Atkins, Dwane P
*Cc:* Matt Jonkman; <Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net


*Subject:* Re: [Snort-users] This is a new one



make distclean && ./configure --with-mysql

On 7/27/07, *Atkins, Dwane P* < <ATKINSD () uthscsa edu>ATKINSD () uthscsa edu>
wrote:

I did recompile and still go the same message.  I download the tarball
that Will sent out and then I did a ./configure, make and make install.
I then noticed the error and did a ./configure --with-mysql
--enable-dynamicplugins, make and make install and still received the
same error.

Any ideas will be helpful.

Thanks

Dwane

-----Original Message-----
From: Matt Jonkman [mailto: <jonkman () bleedingthreats net>
jonkman () bleedingthreats net]
Sent: Friday, July 27, 2007 5:58 PM
To: Will Metcalf
Cc: Atkins, Dwane P; <Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net
Subject: Re: [Snort-users] This is a new one

Looks like you need to compile with --with-mysql.

Will Metcalf wrote:
What exactly did you download?

Regards,

Will


On 7/27/07, *Atkins, Dwane P* < <ATKINSD () uthscsa edu>ATKINSD () uthscsa edu
<mailto: <ATKINSD () uthscsa edu>ATKINSD () uthscsa edu>> wrote:

    Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this build of
    snort was obtained as a binary distribution (e.g., rpm, or
Windows),
    then check for alternate builds that contains the necessary
'mysql'
    support.  If this build of snort was compiled by you, then re-run
    the ./configure script using the '--with-mysql' switch. For
    non-standard installations of a database, the '--with-mysql=DIR'
    syntax may need to be used to specify the base directory of the DB
    install.  See the database documentation for cursory details
    (doc/README.database). and the URL to the most recent database
    plugin documentation.



    I recently installed the latest snortsam patches and I have a
    feeling that the new patch installs snort.  I am trying to find
out
    how to get around this.  Maybe someone can help.



    Dwane







------------------------------------------------------------------------
-
    This SF.net email is sponsored by: Splunk Inc.
    Still grepping through log files to find problems?  Stop.
    Now Search log events and configuration files using AJAX and a
browser.
    Download your FREE copy of Splunk now >>   <http://get.splunk.com/>
http://get.splunk.com/
    _______________________________________________
    Snort-users mailing list
    <Snort-users () lists sourceforge net>Snort-users () lists sourceforge net
    <mailto: <Snort-users () lists sourceforge net>
Snort-users () lists sourceforge net>
    Go to this URL to change user options or unsubscribe:
    <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users

< <https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>
https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users >
    list archive:
    <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
    < <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users>




------------------------------------------------------------------------


------------------------------------------------------------------------
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a
browser.
Download your FREE copy of Splunk now >>   <http://get.splunk.com/>
http://get.splunk.com/



------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
<Snort-users () lists sourceforge net>Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
<https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
US Phone 765-429-0398
US Fax 312-264-0205
AUS Phone 61-42-4157-491
AUS Fax 61-29-4750-026
 <http://www.bleedingthreats.net>http://www.bleedingthreats.net
--------------------------------------------

PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc





--------------------------

PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc





 -------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>   <http://get.splunk.com/>
http://get.splunk.com/

 _______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: