[Snort-users] libpcap question?

J. Craig Woods drjung at ...5405...
Sun Sep 15 10:52:02 EDT 2002

Jason Costomiris wrote:
> On Sun, Sep 15, 2002 at 04:21:51AM -0500, J. Craig Woods wrote:
> : Would some kind soul tell me where in the hell
> : snort-1.8.7-1snort.i386.rpm (from the snort.org page) is looking for
> : libpcap.so.0.6.2? This is a mandrake distro, and I have libpcap0-0.7.1-2
> : and the devel installed. I have setup symlinks in all the usual lib
> : directories to no avail. Where, or from what directory, is the little
> : piggy doing the search for this file?
> That RPM was built against RedHat.  Get the SRPM and rpm --rebuild to suit
> your system's lib versions..
> --

Yea, I could see that it was built for RedHat but when trying to rebuild
the src rpm, I was getting mysql-devel dependency problems, even though
I have all the mysql components installed, including mysql-devel. I am
not sure why it was choking, given that all the proper mysql components
were installed, and I did not feel like hacking on the spec file. Of
course, the src rpm was looking for the mysql-devel because it builds
all the different versions of snort, and I was only interested in the
"stand alone" version. So I forced the installation of the binary rpm,
with "nodeps" and "force", and it installed. After the installation, I
again created smylinks for the library file in "/usr/lib/" and
"/usr/local/lib", and the little piggy was happy. For some reason, the
binary rpm would not install with the symlinks but, by hacking after the
installation, all is well now. Thanks for the feedback.


J. Craig Woods
UNIX Network/System Administration
Character is built upon the debris of despair --Emerson

More information about the Snort-users mailing list