Re: [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard

[Rachmat Hidayat Al-Anshar <rachmat_hidayat_02 () yahoo com>]

Hi Joel, thanks for the response...

| 
What version of Snort are you running?
Snort-2.8.0 and Snortsam-patch-2.8 

|Is SnortSAM compatible with that version?
Obviously didn't know, what do u think?

| Did you notice you typed "--with-ysql-libraries" instead of "--with-mysql-libraries".
my bad, but, I do reconfigure Snort with:
# ./configure --enable-dynamicplugin --with-mysql-includes=/usr/include/mysql --with-mysql-libraries=/usr/lib

and the message still occur. :-( 
Is it any problem with SnortSam patch for Snort?!
please help...

Any response will be appreciated
Thanks
(^^!) Mat


----- Original Message ----
From: Joel Esler <joel.esler () sourcefire com>
To: Rachmat Hidayat Al-Anshar <rachmat_hidayat_02 () yahoo com>
Cc: snortsam-discussion () snortsam net; Snort-users () lists sourceforge net
Sent: Saturday, November 3, 2007 8:22:35 PM
Subject: Re: [Snort-users] [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard


What version of Snort are you running?Is SnortSAM compatible with that version?


Did you notice you typed "--with-ysql-libraries" instead of "--with-mysql-libraries".


In addition to that, I recommend you do NOT have Snort log directly to the DB, instead, use Snort to log to unified, 
then have a separate tool named "barnyard" to insert the unified files into the DB.


J


On Nov 3, 2007, at 1:49 AM, Rachmat Hidayat Al-Anshar wrote:

All right then, 
I've been trying to going through this process with ignoring the warning message produced by aclocal.
The proccess continued

# autoheader 
# automake –add-missing
# autoconf 
#./configure --enable-dynamicplugin --with-mysql-includes=/usr/include/mysql --with-ysql-libraries=/usr/lib

and suddenly...

spo_alert_fwsam.c: In function 'AlertFWsamSetup':
spo_alert_fwsam.c:143: warning: passing arg 3 of 'RegisterOutputPlugin' from incompatible pointer type
spo_alert_fwsam.c:144: error: too few arguments to function 'RegisterPlugin'  
spo_alert_fwsam.c: In function 'AlertFWsam':
spo_alert_fwsam.c:905: warning: passing arg 2 of 'TwoFishEncrypt' from incompatible pointer type 
spo_alert_fwsam.c:940: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
spo_alert_fwsam.c:946: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
spo_alert_fwsam.c:979: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
spo_alert_fwsam.c:985: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
spo_alert_fwsam.c: In function 'FWsamCheckOut':
spo_alert_fwsam.c:1141: warning: passing arg 2 of 'TwoFishEncrypt' from incompatible pointer type
spo_alert_fwsam.c:1157: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
spo_alert_fwsam.c:1163: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
spo_alert_fwsam.c: In function 'FWsamCheckIn':
spo_alert_fwsam.c:1274: warning: passing arg 2 of 'TwoFishEncrypt' from incompatible pointer type
spo_alert_fwsam.c:1293: warning: passing arg 2 of 'TwoFishDecrypt' from incompatible pointer type
make[3]: *** [spo_alert_fwsam.o] Error 1
make[3]: Leaving directory '/research/snort/snort-2.8.0/src/output-plugins'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory '/research/snort/snort-2.8.0/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory '/research/snort/snort-2.8.0'
make: *** [all] Error 2

What's wrong with snort?!
How to solve this?

Any response will be appreciated
Thanks
(^^!) Mat



__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com -------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users








__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users