Snort mailing list archives

Barnyard2 startup error: Snort not compiled to use mysql but --with-mysql option invalid


From: Kurt Jensen <kjensencissp () gmail com>
Date: Wed, 24 Apr 2013 15:43:34 -0400

hello:

We have a working install of Snort 2.9.4.5 on SuSE 12.2 that logs fine but we need to use Barnyard2 and send this data 
to mysql.  We did not know of any manual steps or added options being required to compile Snort for mysql use with 
barnyard.  When we start barnyard2 for use with Snort, mysql and Snorby we get the "snort not compiled for use with 
mysql" errors and barnyard2 fatals out.

We found some options online for snort compiling that also did not work or: ./configure --with-mysql

when trying that option or several versions of it the compile runs to the end but then fails at this step and flags it 
as an  invalid option.   

Can anyone tell us what the correct command and options are please to compile Snort and Barnyard to use mysql?

Thanks!

 

James Lay <jlay () slave-tothe-box net> wrote:

On 2013-04-24 09:52, John Ainsworth wrote:
Hi

Im pulling my hair out on this problem

I have installed Snort on Ubunutu 12.04 , 2 nics eth0 used for
management eth1 is receiving traffic that is coming into our firewall
via SPAN on the switch

0 byte u2 files mean no alerts happened.  Have you set something like:

output alert_fast: snortalert.fast

in your snort.conf to verify that you're getting alerts at all?

James

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: