problems installing snort with mysql on Ubuntu server 8.04 (UNCLASSIFIED)

["Craig" <reswob10 () gmail com>]

Classification:  UNCLASSIFIED 
Caveats: NONE



OK.  I've been working on this for two whole days.  Here's my problem in a
nutshell:

Installation of barnyard with mysql fails at this point:

checking for
/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/mysql//mysql.h... yes
checking for mysql_real_connect in -lmysqlclient... no


**********************************************
  ERROR: unable to find mysqlclient library
  checked in the following places
**********************************************

Lengthy history of what I've tried and done prior to this:


Prior to this I looked at several how-to's from the following locations:

http://www.howtoforge.com/intrusion_detection_base_snort
http://www.snort.org/docs/setup_guides/deb-snort-howto.pdf
http://linux.justinhartman.com/Intrusion_Detection_using_BASE_and_Snort

First, I installed Ubuntu Server 8.04 with LAMP and SSH server. 
I then updated all sources and upgraded all installed packages
I then downloaded the latest Snort, PCRE, LIBPCAP, BASE and ADOdb.
To get libpcap to configure and install, I first had to run the following:

sudo apt-get install gcc g++ libc6-dev make flex bison libpcap-dev

After that, libpcap installed no problem.  But when I tried to install Snort
with the following command:

sudo ./configure --enable-dynamicplugin --with-mysql 

it complained about not finding the mysql headers.  So I amended the command
to:

sudo ./configure --enable-dynamicplugin --with-mysql
--with-mysql-includes=./snort-2.8.3.1/src/win32/WIN32-Includes/mysql/

which is the directory where mysql.h was located.  Then, I got the following
error:

checking for dlsym in -ldl... no
checking for dlsym in -lc... no

    ERROR!  programmatic interface to dynamic link loader
    not found.  Cannot use dynamic plugin libraries."

More searching found several recommendations against configuring snort with
mysql.  So I tried again without mysql and it worked.  Great.  So I then
obtained the latest version of barnyard and attempted to install that.

But when I ran the following command:

sudo ./configure --enable-mysql
-with-mysql-includes=/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/
mysql

I got the following error:

checking for
/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/mysql/mysql.h... yes
checking for mysql_real_connect in -lmysqlclient... no


**********************************************
  ERROR: unable to find mysqlclient library
  checked in the following places
**********************************************


Any suggestions?

Thanks.


Craig L. Bowser
CISSP           SANS GSEC (Gold)
craig.bowser1 at us dot army dot mil
-------------------------------
If you wish to be a success in the world, promise everything, deliver
nothing. - Napoleon Bonaparte
Classification:  UNCLASSIFIED 
Caveats: NONE



-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users