[Snort-users] Problems installing SNORT

Robert Kane rkane at ...258...
Wed Jun 11 19:03:02 EDT 2003


I have followed the instructions in Patrick Harper's Installation Manual to
install Snort, Apache, PHP, MySQL and ACID.

I have Redhat 9, manually compiled and installed zlib 1.1.4 from source (not
RPM), then mysql-standard-4.0.1, then Apache 2.0.46 with PHP 4.3.2
sucessfully.  Apache works, PHP  works, I can also use MySQL, see DBs and
tables.

When attempting to install snort I am running the following command:
./configure --with-mysql=/usr/local/mysql (and have also tried
./configure --with-mysql=/usr/local/mysql --with-zlib).

running ./configure yields success and the reports:

checking for pcap_datalink in -lpcap... yes
checking for mysql... yes
checking for compress in -lz... yes  <------- NOTICE this
checking for u_int8_t... yes
checking for u_int16_t... yes
checking for u_int32_t... yes

When I attempt to compile the following are the results:

make  all-recursive
make[1]: Entering directory `/root/src/snort-2.0.0'
Making all in src
make[2]: Entering directory `/root/src/snort-2.0.0/src'
Making all in win32
make[3]: Entering directory `/root/src/snort-2.0.0/src/win32'
make[3]: Nothing to be done for `all'.
make[3]: Leaving directory `/root/src/snort-2.0.0/src/win32'
Making all in output-plugins
make[3]: Entering directory `/root/src/snort-2.0.0/src/output-plugins'
make[3]: Nothing to be done for `all'.
make[3]: Leaving directory `/root/src/snort-2.0.0/src/output-plugins'
Making all in detection-plugins
make[3]: Entering directory `/root/src/snort-2.0.0/src/detection-plugins'
make[3]: Nothing to be done for `all'.
make[3]: Leaving directory `/root/src/snort-2.0.0/src/detection-plugins'
Making all in preprocessors
make[3]: Entering directory `/root/src/snort-2.0.0/src/preprocessors'
make[3]: Nothing to be done for `all'.
make[3]: Leaving directory `/root/src/snort-2.0.0/src/preprocessors'
Making all in parser
make[3]: Entering directory `/root/src/snort-2.0.0/src/parser'
/usr/local/mysql/lib/libmysqlclient.a(my_compress.o)(.text+0xb4): In
function `my_compress_alloc':
: undefined reference to `compress'
/usr/local/mysql/lib/libmysqlclient.a(my_compress.o)(.text+0x12a): In
function `my_uncompress':
: undefined reference to `uncompress'
collect2: ld returned 1 exit status
make[3]: *** [snort] Error 1
make[2]: *** [all-recursive] Error 1
make[1]: *** [all-recursive] Error 1
make: *** [all] Error 2
make[3]: Nothing to be done for `all'.
make[3]: Leaving directory `/root/src/snort-2.0.0/src/parser'
make[3]: Entering directory `/root/src/snort-2.0.0/src'
gcc  -g -O2 -Wall  -L/usr/local/mysql/lib -o snort  codes.o debug.o decode.o
log
.o mstring.o parser.o plugbase.o snort.o snprintf.o strlcatu.o strlcpyu.o
tag.o
ubi_BinTree.o ubi_SplayTree.o util.o detect.o signature.o mempool.o
sf_sdlist.o
threshold.o fpcreate.o fpdetect.o mwm.o mpse.o acsmx.o pcrm.o sfksearch.o
output
-plugins/libspo.a detection-plugins/libspd.a preprocessors/libspp.a
parser/libpa
rser.a -lz -lpcap -lm -lnsl  -lmysqlclient
make[3]: Leaving directory `/root/src/snort-2.0.0/src'
make[2]: Leaving directory `/root/src/snort-2.0.0/src'
make[1]: Leaving directory `/root/src/snort-2.0.0'


Can someone please help?! Why does it find libz yet complain about the an
undefined reference compress???  Is this a problem related to zlib or to
mysql?
HELP!

Rob Kane





More information about the Snort-users mailing list