Re: Snort 2.9 installation error

[Rony Roy <ronyvillil () gmail com>]

Starting snort in deamon mode which shoots this error. As a work around i
copied the snort file from /sbin to  /local/bin/  and started the snort
again and this time snort started successfully..... :)   but i am not sure
whether this a proper way of doing,  please suggest.

 snort -c /etc/snort/snort.conf -D -i eth1

Also please let me know if you have any method to install snort 2.9.1.2 on
RHEL4.  I have tried and created rpm, but it didn't get installed because
of below error,

[root@snrt i386]# rpm -ivh snort-2.9.1.2-1.i386.rpm
error: Failed dependencies:
        libpcap.so.1 is needed by snort-2.9.1.2-1.i386
        libsfbpf.so.0 is needed by snort-2.9.1.2-1.i386

Thank You!!
Rony Roy





On Fri, Jan 13, 2012 at 10:47 PM, waldo kitty <wkitty42 () windstream net>wrote:

> On 1/11/2012 13:02, Rony Roy wrote:
> > I have compiled and installed Snort 2.9.1.2 on RHEL 5.4. But when I am
> checking
> > the Snort Version and trying to start it in demon mode, below error is
> occurring.
> > Please help me to understand the issue.
> >
> > *Error: /usr/local/bin/snort: No such file or directory*
> >
> > **
> >
> > Output of “whereis snort” command:
> >
> > [root@merry ~]# whereis snort
> >
> > snort: /usr/sbin/snort /etc/snort /usr/local/lib/snort
> > /usr/share/man/man8/snort.8.gz
>
> how, exactly, are you attempting to start snort? that error is accurate
> because
> that entry certainly does not exist in the whereis output ;)
>
>
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Mar 27 - Feb 2
> Save $400 by Jan. 27
> Register now!
> http://p.sf.net/sfu/rsa-sfdev2dev2
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
RSA(R) Conference 2012
Mar 27 - Feb 2
Save $400 by Jan. 27
Register now!
http://p.sf.net/sfu/rsa-sfdev2dev2

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!