Re: [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard

[Joel Esler <joel.esler () sourcefire com>]

What version of Snort are you running?
Is SnortSAM compatible with that version?

Did you notice you typed "--with-ysql-libraries" instead of "--with- 
mysql-libraries".

In addition to that, I recommend you do NOT have Snort log directly to  
the DB, instead, use Snort to log to unified, then have a separate  
tool named "barnyard" to insert the unified files into the DB.

J

On Nov 3, 2007, at 1:49 AM, Rachmat Hidayat Al-Anshar wrote:

> All right then,
> I've been trying to going through this process with ignoring the  
> warning message produced by aclocal.
> The proccess continued
>
> # autoheader
> # automake –add-missing
> # autoconf
> #./configure --enable-dynamicplugin --with-mysql-includes=/usr/ 
> include/mysql --with-ysql-libraries=/usr/lib
>
> and suddenly...
>
> spo_alert_fwsam.c: In function 'AlertFWsamSetup':
> spo_alert_fwsam.c:143: warning: passing arg 3 of  
> 'RegisterOutputPlugin' from incompatible pointer type
> spo_alert_fwsam.c:144: error: too few arguments to function  
> 'RegisterPlugin'
> spo_alert_fwsam.c: In function 'AlertFWsam':
> spo_alert_fwsam.c:905: warning: passing arg 2 of 'TwoFishEncrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:940: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:946: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:979: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:985: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c: In function 'FWsamCheckOut':
> spo_alert_fwsam.c:1141: warning: passing arg 2 of 'TwoFishEncrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:1157: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:1163: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c: In function 'FWsamCheckIn':
> spo_alert_fwsam.c:1274: warning: passing arg 2 of 'TwoFishEncrypt'  
> from incompatible pointer type
> spo_alert_fwsam.c:1293: warning: passing arg 2 of 'TwoFishDecrypt'  
> from incompatible pointer type
> make[3]: *** [spo_alert_fwsam.o] Error 1
> make[3]: Leaving directory '/research/snort/snort-2.8.0/src/output- 
> plugins'
> make[2]: *** [all-recursive] Error 1
> make[2]: Leaving directory '/research/snort/snort-2.8.0/src'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory '/research/snort/snort-2.8.0'
> make: *** [all] Error 2
>
> What's wrong with snort?!
> How to solve this?
>
> Any response will be appreciated
> Thanks
> (^^!) Mat
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com  
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a  
> browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/_______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users