[Snort-users] snort-2.0.0 fails to start

Roy S. Rapoport snort-users at ...9230...
Tue Jun 17 13:26:07 EDT 2003


On Tue, Jun 17, 2003 at 02:39:37PM -0500, Rick Waegner wrote:
> database: compiled support for ( )
> database: configured to use mysql
> database: 'mysql' support is not compiled into this build of snort
[...]
> the mysql database is present, the contrib/create_mysql was run and the
> tables are present, i ran './configure --with-mysql' 'make' 'make install'.
> 
> Are there known issues with snort-2.0.0 and mysql support??

Yes.  Snort 2.0.0 refuses to log to MySQL databases unless MySQL support
is ACTUALLY compiled into it; it's a known issue.

The solution is to make sure that MySQL support really is compiled into
Snort.  Find the snort binary and run 'ldd' on it.  The output should
look *something* like this:
---
1 nag /usr/local/snort/bin # ldd snort
        libz.so.1 =>     /usr/lib/libz.so.1
        libm.so.1 =>     /usr/lib/libm.so.1
        libsocket.so.1 =>        /usr/lib/libsocket.so.1
        libnsl.so.1 =>   /usr/lib/libnsl.so.1
        libmysqlclient.so.12 => /usr/local/mysql/lib/mysql/libmysqlclient.so.12
        libc.so.1 =>     /usr/lib/libc.so.1
        libdl.so.1 =>    /etc/lib/libdl.so.1
        libmp.so.2 =>    /usr/lib/libmp.so.2
        libcrypt_i.so.1 =>       /usr/lib/libcrypt_i.so.1
        libgen.so.1 =>   /usr/lib/libgen.so.1
        /usr/platform/SUNW,Ultra-2/lib/libc_psr.so.1
---

Notice the link to the libmysqlclient.so.12 there.

Configuring snort with --with-mysql is a good start, but the config file
may not find where the libraries are; you may wish to try
--with-mysql=<install directory of mysql>, eg "--with-mysql=/usr/local/mysql"


-roy




More information about the Snort-users mailing list