Re: Snort 2.9.4.0 on CentOS 5.8

[vincent () cojot name]

On Tue, 12 Feb 2013, Kaushal Shriyan wrote:

> Adding joel () snort org
>
> On Tue, Feb 12, 2013 at 4:16 PM, Kaushal Shriyan <kaushalshriyan () gmail com> wrote:
>       Hi
> Any step by step document to install Snort 2.9.4.0 on CentOS Linux 5.8?
>
> Regards,
>
> Kaushal

Hi Kaushal,

We're using these RPMs here on RHEL5:
http://vscojot.free.fr/dist/snort/snort-2.9.4/RHEL5
Make sure you use the libpcap1 package as not to avoid conflicting with 
your distros default libpcap.
Best regards,

# uname -a
Linux any 2.6.18-348.1.1.el5 #1 SMP Fri Dec 14 05:25:59 EST 2012 
x86_64 x86_64 x86_64 GNU/Linux
# rpm -q snort
snort-2.9.4-23.el5.x86_64
# ldd /usr/sbin/snort
        linux-vdso.so.1 =>  (0x00007ffff25fd000)
        libcrypto.so.6 => /lib64/libcrypto.so.6 (0x0000003802600000)
        libpcre.so.0 => /lib64/libpcre.so.0 (0x0000003806c00000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x0000003801200000)
        libuuid.so.1 => /lib64/libuuid.so.1 (0x000000380f000000)
        libm.so.6 => /lib64/libm.so.6 (0x00000037fa600000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00000037fa200000)
        libsfbpf.so.0 => /usr/lib64/libsfbpf.so.0 (0x00000035c7a00000)
        libpcap.so.1 => /usr/lib64/libpcap.so.1 (0x00000037fb600000)
        libdnet.so.1 => /usr/lib64/libdnet.so.1 (0x00000037fb200000)
        libz.so.1 => /usr/lib64/libz.so.1 (0x00000037fae00000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00000037faa00000)
        libc.so.6 => /lib64/libc.so.6 (0x00000037f9e00000)
        /lib64/ld-linux-x86-64.so.2 (0x00000037f9a00000)

# ls -ld /usr/lib64/libpcap.so*
lrwxrwxrwx 1 root root     16 May  3  2010 /usr/lib64/libpcap.so -> libpcap.so.0.9.4
lrwxrwxrwx 1 root root     16 May  3  2010 /usr/lib64/libpcap.so.0 -> libpcap.so.0.9.4
lrwxrwxrwx 1 root root     16 May  3  2010 /usr/lib64/libpcap.so.0.9 -> libpcap.so.0.9.4

Vincent

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!