[Snort-users] Problems with Snort and MySQL on FreeBSD 5

Joo Carlos Couto jonplas115 at ...125...
Mon Jun 9 11:27:07 EDT 2003


I tried to start snort with the -T option, but it didn't work and showed me 
th same error. I'll try to install again looking for the mysql parts of the 
instalation.

Thank You again.

João Carlos Monteiro Couto
Administração e Gerência de Redes
Ministério do Trabalho e Emprego



>From: twig les <twigles at ...131...>
>To: Joo Carlos Couto <jonplas115 at ...125...>, pauls at ...6838...
>CC: snort-users at lists.sourceforge.net
>Subject: RE: [Snort-users] Problems with Snort and MySQL on FreeBSD 5
>Date: Mon, 9 Jun 2003 10:53:18 -0700 (PDT)
>
>This happens a lot when bsd can't find mysql during the snort
>compilation.  Start snort with the -T option, it may not be
>starting at all.  If not try reinstalling snort over the current
>setup and watching the make output to see if it finds mysql.
>
>--- Joo Carlos Couto <jonplas115 at ...125...> wrote:
> > Thank You for answering...
> >
> > Don't worry, I did run "make install" after "make
> > -DWITH_MYSQL" and
> > everything went fine. But it simply doesn't work!!!
> > Let's start again. Boot runs ok, apache initialized, Idled ...
> > , MySQL, ...
> > and when it has to come up with Snort, I get the following
> > error:
> > "If this built of Snort was obtained as a binary distribution
> > (e.g., rpm, or
> > Windows) , then check for alternate builds that contains the
> > necessary
> > 'mysql' support. ..."
> > So, I don't have the Snort service started.
> > If I try to start this by hand, using the snort.sh script, it
> > gives me no
> > errors and seens to start the service. But I have nothing
> > written in my
> > database.
> >
> >
> >
> > >From: "Schmehl, Paul L" <pauls at ...6838...>
> > >To: "Joo Carlos Couto"
> > ><jonplas115 at ...125...>,<snort-users at lists.sourceforge.net>
> > >Subject: RE: [Snort-users] Problems with Snort and MySQL on
> > FreeBSD 5
> > >Date: Mon, 9 Jun 2003 10:18:40 -0500
> > >
> > >Don't hit me, OK?  You *did* run "make install" after "make
> > >-DWITH_MYSQL" didn't you?  And you used "-DWITH_MYSQL" not
> > "DWITH-MYSQL"
> > >(which is what you typed in this message), right?
> > >
> > >If so, it should be working, assuming you have created a user
> > for mysql
> > >with the correct grants and you've placed that user's id and
> > pass in the
> > >snort.conf file.
> > >
> > >Paul Schmehl (pauls at ...6838...)
> > >Adjunct Information Security Officer
> > >The University of Texas at Dallas
> > >AVIEN Founding Member
> > >http://www.utdallas.edu/~pauls/
> > >
> > >-----Original Message-----
> > >From: Joo Carlos Couto [mailto:jonplas115 at ...125...]
> > >Sent: Monday, June 09, 2003 8:13 AM
> > >To: snort-users at lists.sourceforge.net
> > >Subject: [Snort-users] Problems with Snort and MySQL on
> > FreeBSD 5
> > >
> > >
> > >Hi everybody,
> > >
> > >I've installed a FreeBSD running Apache, MySQL, Snort and
> > ACID. The
> > >machine
> > >starts booting ok, but after MySQL starts, Snort tries to
> > come up but it
> > >
> > >stops with an error message. Something like I had installed
> > Snort
> > >without
> > >MySQL support.
> > >I installed Snort through cvsup using "make -DWITH-MYSQL" .
> > >Ok, the machine starts, but when I try to to start snort
> > manually it
> > >gives
> > >me no errors, but just doesn't work.
> > >I guess my problem is in sending the snort alerts to the
> > MySQL database.
> > >Does someone have any idea???
> > >
> >
> >_________________________________________________________________
> > >MSN Hotmail, o maior webmail do Brasil.
> > http://www.hotmail.com
> > >
> > >
> > >
> > >-------------------------------------------------------
> > >This SF.net email is sponsored by:  Etnus, makers of
> > TotalView, The best
> > >thread debugger on the planet. Designed with thread debugging
> > features
> > >you've never dreamed of, try TotalView 6 free at
> > www.etnus.com.
> > >_______________________________________________
> > >Snort-users mailing list
> > >Snort-users at lists.sourceforge.net
> > >Go to this URL to change user options or unsubscribe:
> > >https://lists.sourceforge.net/lists/listinfo/snort-users
> > >Snort-users list archive:
> > >http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> > >
> > >-------------------------------------------------------
> > >This SF.net email is sponsored by:  Etnus, makers of
> > TotalView, The best
> > >thread debugger on the planet. Designed with thread debugging
> > features
> > >you've never dreamed of, try TotalView 6 free at
> > www.etnus.com.
> > >_______________________________________________
> > >Snort-users mailing list
> > >Snort-users at lists.sourceforge.net
> > >Go to this URL to change user options or unsubscribe:
> > >https://lists.sourceforge.net/lists/listinfo/snort-users
> > >Snort-users list archive:
> > >http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
>_________________________________________________________________
> > MSN Hotmail, o maior webmail do Brasil.
> > http://www.hotmail.com
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by:  Etnus, makers of
> > TotalView, The best
> > thread debugger on the planet. Designed with thread debugging
> > features
> > you've never dreamed of, try TotalView 6 free at
> > www.etnus.com.
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>=====
>-----------------------------------------------------------
>Emo is what happens when the glee club goes punk.
>-----------------------------------------------------------
>
>__________________________________
>Do you Yahoo!?
>Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
>http://calendar.yahoo.com
>
>
>-------------------------------------------------------
>This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
>thread debugger on the planet. Designed with thread debugging features
>you've never dreamed of, try TotalView 6 free at www.etnus.com.
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________________
MSN Hotmail, o maior webmail do Brasil.  http://www.hotmail.com





More information about the Snort-users mailing list