[Snort-users] snort-2.0.0 fails to start
Roy S. Rapoport
snort-users at ...9230...
Tue Jun 17 13:26:07 EDT 2003
On Tue, Jun 17, 2003 at 02:39:37PM -0500, Rick Waegner wrote:
> database: compiled support for ( )
> database: configured to use mysql
> database: 'mysql' support is not compiled into this build of snort
> the mysql database is present, the contrib/create_mysql was run and the
> tables are present, i ran './configure --with-mysql' 'make' 'make install'.
> Are there known issues with snort-2.0.0 and mysql support??
Yes. Snort 2.0.0 refuses to log to MySQL databases unless MySQL support
is ACTUALLY compiled into it; it's a known issue.
The solution is to make sure that MySQL support really is compiled into
Snort. Find the snort binary and run 'ldd' on it. The output should
look *something* like this:
1 nag /usr/local/snort/bin # ldd snort
libz.so.1 => /usr/lib/libz.so.1
libm.so.1 => /usr/lib/libm.so.1
libsocket.so.1 => /usr/lib/libsocket.so.1
libnsl.so.1 => /usr/lib/libnsl.so.1
libmysqlclient.so.12 => /usr/local/mysql/lib/mysql/libmysqlclient.so.12
libc.so.1 => /usr/lib/libc.so.1
libdl.so.1 => /etc/lib/libdl.so.1
libmp.so.2 => /usr/lib/libmp.so.2
libcrypt_i.so.1 => /usr/lib/libcrypt_i.so.1
libgen.so.1 => /usr/lib/libgen.so.1
Notice the link to the libmysqlclient.so.12 there.
Configuring snort with --with-mysql is a good start, but the config file
may not find where the libraries are; you may wish to try
--with-mysql=<install directory of mysql>, eg "--with-mysql=/usr/local/mysql"
More information about the Snort-users