[Snort-users] Snort install
austad at ...432...
Fri Jan 18 10:06:07 EST 2002
Also, if you've installed libpcap from source, and done the normal "make
install", it won't show up in the rpm database. If you want your source
compiled programs to show up in the rpm database, you can get the program
"checkinstall", do a search on freshmeat.net for it.
If you have installed libpcap from source and you know it's on the box, you
can install the snort rpm using:
rpm -ivh --nodeps snort-xxxxxx.rpm
> -----Original Message-----
> From: Chris Green [mailto:cmg at ...671...]
> Sent: Thursday, January 17, 2002 5:05 PM
> To: Warrick FitzGerald
> Cc: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] Snort install
> "Warrick FitzGerald" <wfitzgerald at ...4613...> writes:
> > 1. (*) text/plain ( ) text/html
> > Hi All,
> > I know this is a real newbie question, but Im sorry I'v
> been stuck for a
> > day and a half and really need some help.
> > When installing "snort-1.8.1-1mdk.i586.rpm" i get the
> following error :
> Warning: thats a very old version of snort
> > error: failed dependencies:
> > libpcap >= 0.4 is needed by snort-1.8.1-1mdk
> > libpcap.so.0 is needed by snort-1.8.1-1mdk
> > Yes this seems simple and I know Im going to feel stupid
> when I hear the
> > answer but here is what I have done to fix the problem.
> > A. Tried to install libpcap, but am not 100% sure how to
> tell if it is
> > installed correctly. However rpm -q reveals that it is not
> rpm -q libpcap
> > [root at ...4614... root]# rpm -qa | grep libp libpng2-1.0.12-2mdk
> > libpilot-link4-0.9.5-3mdk
> > the confusing thing though is that tcpdump works ???? HOW ????
> Statically linked pcap into the binary.
> > B. My Path looks something like this :
> FYI $PATH doesn't have anything to do with that library problem.
> > If anyone can tell me what Im doing wrong, I would really appreciate
> You need to install libpcap, preferably a very current one. I'd
> recommend downloading the current beta pcap and compiling snort
> against that.
> When you compile snort, use --with-libpcap-libraries=~/src/libpcap---
> Chris Green <cmg at ...671...>
> Don't use a big word where a diminutive one will suffice.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users