Snort mailing list archives

Re: MySQL support for Snort 2.9.4


From: Kaya Saman <kayasaman () gmail com>
Date: Tue, 11 Dec 2012 04:37:34 +0000

On 12/11/2012 04:29 AM, Jeremy Hoel wrote:
All those lovely flags..  yeah openBSD.  :-)

But I'm really glad you got it working.. that's great.

Thanks for all the help!

This is a first for me being helped by someone in a 'drive through' too 
which adds to the occasion :-)

Though you might see me soon next time you "drive through": "can I take 
your order sir?"


Best regards,


Kaya



On Mon, Dec 10, 2012 at 9:27 PM, Kaya Saman <kayasaman () gmail com> wrote:
On 12/11/2012 03:09 AM, Jeremy Hoel wrote:
On Mon, Dec 10, 2012 at 8:06 PM, Kaya Saman <kayasaman () gmail com> wrote:
On 12/11/2012 03:01 AM, Jeremy Hoel wrote:
On Mon, Dec 10, 2012 at 7:47 PM, Kaya Saman <kayasaman () gmail com> wrote:
On 12/11/2012 02:39 AM, Jeremy Hoel wrote:

Emailing and driving? That's a new one

hahaa..  drive through..  takes forever!


Better that then "drive-by" LOL

[...]

Can you paste your snort.conf?

Attached:
Do you have ipv6 enabled?

Have you tried moving that file out of the directory and seeing it
works?

IPv6 is enabled and IPv6 routing is enabled too.... (since the box is a
gateway/router)

Which is the file, by the name I'm guessing:

libsf_ssl_preproc.a
libsf_ssl_preproc.la
libsf_ssl_preproc.so
libsf_ssl_preproc.so.0.0

??
HUmm.. I would think it would be the .so file, but are all four of
those in the preprocessor folder?

I'm about at a loss.. I haven't had this error before. I'm going to
have to look at some things.. and maybe someone else has an idea.

Ok looks like I got this working!

Steps I took:

cd /usr/local/lib/snort_dynamicpreprocessor/
rm -rf *
cd /<snort-2.9.3.1>/path
make clean
./cfg.sh
make
make install

cfg.sh file contains:

./configure --enable-sourcefire --with-libpcap-libraries=/usr/local/lib
--with-libpcap-includes=/usr/local/include \
--with-daq-includes=/usr/local/include --with-daq-libraries=/usr/local/lib
--disable-static-daq --enable-flexresp3 \
--enable-ipv6


Now Snort starts at least! :-)


Regards,


Kaya


------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: