[Snort-users] new Barnyard new snortb

Michael Anderson mca at ...1717...
Fri May 14 11:07:04 EDT 2004


Chuck,
I ran it once with --enable-mysql.  If barnyard can't find your mysql 
installation then you need to also add --with-mysql-includes.  If you 
use both then you need to use them both at the same time.  Each time you 
run configure, you are changing the make configuration.

-Mike

Chuck Holley wrote:

>When I run the .configure, do I need to run it twice? Once for
>--enable-mysql and --with-mysql-includes="" ??  I ran it initially with the
>--with-mysql-includes statement and now I am getting the error I previously
>posted.
>
>thanks
>
>-----Original Message-----
>From: snort-users-admin at lists.sourceforge.net
>[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Bamm Visscher
>Sent: Thursday, May 13, 2004 4:31 PM
>To: Chuck Holley
>Cc: 'Michael Anderson'; snort-users at lists.sourceforge.net;
>barnyard-users at lists.sourceforge.net
>Subject: Re: [Snort-users] new Barnyard new snortb
>
>My guess is that mysql (or postgres) support didn't get compiled correctly
>into your binary. Make sure you use './configure --eable-mysq', it doesn't
>generate any errors, and you see the switch '-DENABLE_MYSQL' being passed to
>the compiler during your make.
>
>If this is barnyard version 0.2.0 the, see this thread [1] about fixing a
>bug.
>
>BTW, the barnyard mailing lists is a better place to get answers to these
>questions. I know Andrew watches them.
>
>Bammkkkk
>
>[1] http://marc.theaimsgroup.com/?l=snort-users&m=108379037315936&w=2
>
>On Thu, May 13, 2004 at 03:45:28PM -0400, Chuck Holley wrote:
>  
>
>>I am getting this:
>>  
>>[root at ...11803... root]# barnyard -D -c /opt/barnyard-0.2.0/etc/barnyard.conf -w
>>/var/log/snort/_wald.log -f snort.log -X /var/run/barnyard.pid
>>Barnyard Version 0.2.0 (Build 32)
>>WARNING /opt/barnyard-0.2.0/etc/barnyard.conf(127) => Unknown output
>>    
>>
>plugin
>  
>
>>"log_acid_db" referenced, ignoring!Fatal Error, Quitting..
>>
>>Any thoughts??
>>
>>
>>    
>>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by: SourceForge.net Broadband
>Sign-up now for SourceForge Broadband and get the fastest
>6.0/768 connection for only $19.95/mo for the first 3 months!
>http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>  
>





More information about the Snort-users mailing list