Snort mailing list archives

Re: Question regarding Barnyard2


From: Dheeraj Gupta <dheeraj.gupta4 () gmail com>
Date: Mon, 16 Jan 2017 10:05:46 +0530

Hi,

Possibly a dumb suggestion but did you try a plain --with-mysql (no
capitalization) with ./configure
If you request MySQL support and configure cannot find required libraries,
it will fail with an error. However, if you supply --with-MySQL, configure
will possibly only show a warning (at the beginning) and then happily
continue with rest of configuration process.

I haven't compiled barnyard from source in a long time, but I think if you
look at configure output, you should see something like
"Checking for MySQL support"...yes
in the output
Also when you do a make, a MYSQL(or something similar) flag should be added
to each compile command printined during make process. (Something like
-DMYSQL)
If both these are not present, it points to the fact that configure was run
without request for MySQL support.

Regards,
Dheeraj

On Mon, Jan 16, 2017 at 9:57 AM, <snort-users-request () lists sourceforge net>
wrote:

Send Snort-users mailing list submissions to
        snort-users () lists sourceforge net

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.sourceforge.net/lists/listinfo/snort-users
or, via email, send a message with subject or body 'help' to
        snort-users-request () lists sourceforge net

You can reach the person managing the list at
        snort-users-owner () lists sourceforge net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-users digest..."


When responding, please don't respond with the entire Digest.  Please trim
your response.

Today's Topics:

   1. Re: Question regarding Barnyard2 (Bob Baller)
   2. Re: Question regarding Barnyard2 (Noah Dietrich)


----------------------------------------------------------------------

Message: 1
Date: Sun, 15 Jan 2017 13:02:48 -0600
From: "Bob Baller" <bobballer () q com>
Subject: Re: [Snort-users] Question regarding Barnyard2
To: "'Y M'" <snort () outlook com>,        <snort-users () lists sourceforge net

Message-ID: <002401d26f61$f7088fd0$e519af70$@q.com>
Content-Type: text/plain; charset="us-ascii"

Thanks for the response.  Looking in Synaptic, I see the following
installed:



.         Libmysqlclient-dev

.         libmysqlclient20

Both of them are at version 5.7.16-0ubuntu0.16.04.1



So here is possibly a dumb question:  Is it possible for something to be
installed and not show up in Synaptic?





From: Y M [mailto:snort () outlook com]
Sent: Sunday, January 15, 2017 9:05 AM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Question regarding Barnyard2



I "think" you have to also install libmysqlclient-dev or it's equivalent on
your distro. I am not on a computer to validate.



YM.

_____________________________
From: Bob Baller <bobballer () q com>
Sent: Sunday, January 15, 2017 12:32 AM
Subject: [Snort-users] Question regarding Barnyard2
To: <snort-users () lists sourceforge net>





Hello,  I am having a problem getting Barnyard2 to work.  Snort seems to be
working fine but I keep getting the following error when I attempt to run
Barnyard:

ERROR database: 'mysql' support is not compiled into this build of
barnyard2



ERROR: If this build of barnyard2 was obtained as a binary distribution
(e.g., rpm,

or Windows), then check for alternate builds that contains the necessary

'mysql' support.



I've set '--with-MySql' and have reinstalled it many times.  I am clearly
missing something



I am running the following



Linux Mint           ver 18 32bit

MySql                   ver 5.7.16-0ubuntu0.16.04.1

Snort                     ver 2.9.7.0-5

Barnyard2           ver 2.1.14 Build 339



I would appreciate any help.



-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

Message: 2
Date: Mon, 16 Jan 2017 06:27:04 +0200
From: Noah Dietrich <noah_dietrich () 86penny org>
Subject: Re: [Snort-users] Question regarding Barnyard2
To: Bob Baller <bobballer () q com>
Cc: snort-users () lists sourceforge net
Message-ID:
        <CA+N0JEyRoey3ffnL9CeEWHhTSYRTYFLEZxXiiM5oWPzOL4m-nQ@mail.gmail.
com>
Content-Type: text/plain; charset="utf-8"

These are the two sql libraries you need to install Barnyard2:
sudo apt-get install -y mysql-server libmysqlclient-dev mysql-client

I suspect that your issue is that you're not using the correct flag when
you configure barnyard2.  The correct command is one of the following two
lines (probably the second line, since you're on the x86 version of
Ubuntu):
./configure --with-mysql --with-mysql-libraries=/usr/lib/x86_64-linux-gnu
./configure --with-mysql --with-mysql-libraries=/usr/lib/i386-linux-gnu
this ensures that you are adding the correct mysql libraries.

These instructions are from my Snort guide:
http://sublimerobots.com/2017/01/snort-2-9-9-x-ubuntu-
installing-barnyard2/

On another note: the version of Snort that you are installing is really old
(i'm assuming you're installing it from the repositories).  You probably
want to install snort manually to get the latest (and supported) version.
My guide is here for the 2.9.9.0 version (latest) release of snort on
Ubuntu:
http://sublimerobots.com/2017/01/snort-2-9-9-x-ubuntu-installing-snort/,
along with barnyard2, PulledPork, and BASE.

Noah

On Sun, Jan 15, 2017 at 9:02 PM, Bob Baller <bobballer () q com> wrote:

Thanks for the response.  Looking in Synaptic, I see the following
installed:



?         Libmysqlclient-dev

?         libmysqlclient20

Both of them are at version 5.7.16-0ubuntu0.16.04.1



So here is possibly a dumb question:  Is it possible for something to be
installed and not show up in Synaptic?





*From:* Y M [mailto:snort () outlook com]
*Sent:* Sunday, January 15, 2017 9:05 AM
*To:* snort-users () lists sourceforge net
*Subject:* Re: [Snort-users] Question regarding Barnyard2



I "think" you have to also install libmysqlclient-dev or it's equivalent
on your distro. I am not on a computer to validate.



YM.

_____________________________
From: Bob Baller <bobballer () q com>
Sent: Sunday, January 15, 2017 12:32 AM
Subject: [Snort-users] Question regarding Barnyard2
To: <snort-users () lists sourceforge net>



Hello,  I am having a problem getting Barnyard2 to work.  Snort seems to
be working fine but I keep getting the following error when I attempt to
run Barnyard:

ERROR database: 'mysql' support is not compiled into this build of
barnyard2



ERROR: If this build of barnyard2 was obtained as a binary distribution
(e.g., rpm,

or Windows), then check for alternate builds that contains the necessary

'mysql' support.



I?ve set ?--with-MySql? and have reinstalled it many times.  I am clearly
missing something



I am running the following



Linux Mint           ver 18 32bit

MySql                   ver 5.7.16-0ubuntu0.16.04.1

Snort                     ver 2.9.7.0-5

Barnyard2           ver 2.1.14 Build 339



I would appreciate any help.



------------------------------------------------------------
------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!

-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

------------------------------------------------------------
------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi

------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-users


End of Snort-users Digest, Vol 128, Issue 24
********************************************

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: