[Snort-users] This is a new one

Atkins, Dwane P ATKINSD at ...9240...
Tue Jul 31 12:09:10 EDT 2007


What did was go into my install directory, remove the extracted
directories and the untar the snort-snortsam-2.6.1.5.tar.gz, cd to that
directory, and then....

 

./configure -with-mysql

Make 

Make install

 

Chkconfig snort on

Service snort start

 

And it worked.  Now let me see if I can get the snortsam agent to
communicate with our snortsam box.  

 

Thanks folks.


Dwane

 

________________________________

From: snort-users-bounces at lists.sourceforge.net
[mailto:snort-users-bounces at lists.sourceforge.net] On Behalf Of Atkins,
Dwane P
Sent: Tuesday, July 31, 2007 10:59 AM
To: Will Metcalf
Cc: Joel Esler; Snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one

 

When I do a make uninstall or make distclean, I get this error

make: *** No rule to make target `uninstall'.  Stop or

make: *** No rule to make target `distclean'.  Stop.

 

It doesn't look like anything is installed now, right?

 

________________________________

From: Will Metcalf [mailto:william.metcalf at ...11827...] 
Sent: Tuesday, July 31, 2007 8:17 AM
To: Atkins, Dwane P
Cc: Joel Esler; Snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one

 

Yeah, you can also re-run ./autojunk.sh  from  source and try again.
You will need the tools included in that script though.

Regards,

Will

On 7/31/07, Atkins, Dwane P <ATKINSD at ...9240...> wrote:

Thanks, Joel.  I will do that and start over.


Dwane

 

________________________________

From: Joel Esler [mailto:joel.esler at ...1935...] 
Sent: Tuesday, July 31, 2007 8:01 AM
To: Atkins, Dwane P
Cc: Atkins, Dwane P; Will Metcalf; Snort-users at lists.sourceforge.net


Subject: Re: [Snort-users] This is a new one

 

If you are trying to compile from a tarball,  and you haven't moved the
files around,  just delete the expanded directory that the tarball made
when you expanded it.  

 

You can also descend into the directory before you delete it and type
'make uninstall'  which will remove any files it may have moved into the
bin directories,  etc.

--

Joel Esler

Sent from the road.


On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD at ...9240...>
wrote:

	Do you think I should start with a fresh system?  Is there a way
to do a complete uninstall of the snort application?  I do not want to
remove base and mysql, just clean up the snort install since I have run
it from two separate directories.

	 

	Thanks to all,

	
	Dwane

	 

	
________________________________


	From: snort-users-bounces at lists.sourceforge.net
[mailto:snort-users-bounces at lists.sourceforge.net] On Behalf Of Atkins,
Dwane P
	Sent: Monday, July 30, 2007 4:10 PM
	To: Will Metcalf
	Cc: <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net
	Subject: Re: [Snort-users] This is a new one

	 

	Yes on the checking and no on the -DENABLE_MYSQL.

	 

	Do I do a ./configure -with-mysql -enable-dynamic-plugins, make
and then a make distclean?

	
	Dwane

	 

	
________________________________


	From: Will Metcalf [mailto: william.metcalf at ...11827...] 
	Sent: Friday, July 27, 2007 7:28 PM
	To: Atkins, Dwane P
	Cc: Matt Jonkman; <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net
	Subject: Re: [Snort-users] This is a new one

	 

	yeah it just cleans it if you have already built snort.  Do you
see the following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?
	
	checking for mysql... yes
	checking for compress in -lz... yes
	
	and 
	
	-DENABLE_MYSQL 
	
	when you run make?

	On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD at ...9240...>
ATKINSD at ...9240... <mailto:ATKINSD at ...9240...> > wrote: 

	I just tried that in both directories and received this error:

	 

	make: *** No rule to make target `distclean'.  Stop.

	 

	Thanks

	 

	Dwane

	 

	
________________________________


	From: Will Metcalf [mailto: <mailto:william.metcalf at ...11827...>
william.metcalf at ...11827...] 
	Sent: Friday, July 27, 2007 6:46 PM
	To: Atkins, Dwane P
	Cc: Matt Jonkman; <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net 

	
	Subject: Re: [Snort-users] This is a new one

	 

	make distclean && ./configure --with-mysql

	On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD at ...9240...>
ATKINSD at ...9240... <mailto:ATKINSD at ...9240...> > wrote: 

	I did recompile and still go the same message.  I download the
tarball
	that Will sent out and then I did a ./configure, make and make
install. 
	I then noticed the error and did a ./configure --with-mysql
	--enable-dynamicplugins, make and make install and still
received the
	same error.
	
	Any ideas will be helpful.
	
	Thanks
	
	Dwane
	
	-----Original Message----- 
	From: Matt Jonkman [mailto: <mailto:jonkman at ...14019...>
jonkman at ...14019... <mailto:jonkman at ...14019...> ]
	Sent: Friday, July 27, 2007 5:58 PM
	To: Will Metcalf
	Cc: Atkins, Dwane P; <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net
	Subject: Re: [Snort-users] This is a new one
	
	Looks like you need to compile with --with-mysql.
	
	Will Metcalf wrote:
	> What exactly did you download?
	>
	> Regards, 
	>
	> Will
	>
	>
	> On 7/27/07, *Atkins, Dwane P* < <mailto:ATKINSD at ...9240...>
ATKINSD at ...9240... <mailto:ATKINSD at ...9240...> 
	> <mailto: <mailto:ATKINSD at ...9240...>  ATKINSD at ...9240...
<mailto:ATKINSD at ...9240...> >> wrote: 
	>
	>     Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this
build of
	>     snort was obtained as a binary distribution (e.g., rpm, or
	Windows),
	>     then check for alternate builds that contains the
necessary 
	'mysql'
	>     support.  If this build of snort was compiled by you, then
re-run
	>     the ./configure script using the '--with-mysql' switch.
For
	>     non-standard installations of a database, the
'--with-mysql=DIR' 
	>     syntax may need to be used to specify the base directory
of the DB
	>     install.  See the database documentation for cursory
details
	>     (doc/README.database). and the URL to the most recent
database 
	>     plugin documentation.
	>
	>
	>
	>     I recently installed the latest snortsam patches and I
have a
	>     feeling that the new patch installs snort.  I am trying to
find
	out
	>     how to get around this.  Maybe someone can help. 
	>
	>
	>
	>     Dwane
	>
	>
	>
	>
	>
	>
	>
	
------------------------------------------------------------------------
	-
	>     This SF.net email is sponsored by: Splunk Inc. 
	>     Still grepping through log files to find problems?  Stop.
	>     Now Search log events and configuration files using AJAX
and a
	browser.
	>     Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
	>     _______________________________________________
	>     Snort-users mailing list
	>     <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net 
	>     <mailto: <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net
<mailto:Snort-users at lists.sourceforge.net> >
	>     Go to this URL to change user options or unsubscribe:
	>     <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
	>     Snort-users
	>
	<
<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>
https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users
<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>  >
	>     list archive:
	>     <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
	>     <
<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users>
	>
	>
	>
	>
	
------------------------------------------------------------------------
	>
	>
	
------------------------------------------------------------------------

	-
	> This SF.net email is sponsored by: Splunk Inc.
	> Still grepping through log files to find problems?  Stop.
	> Now Search log events and configuration files using AJAX and a
	browser.
	> Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
	>
	>
	>
	
------------------------------------------------------------------------
	>
	> _______________________________________________ 
	> Snort-users mailing list
	> <mailto:Snort-users at lists.sourceforge.net>
Snort-users at lists.sourceforge.net
	> Go to this URL to change user options or unsubscribe:
	> <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
	> Snort-users list archive:
	> <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users 
	
	--
	--------------------------------------------
	Matthew Jonkman
	Bleeding Edge Threats
	US Phone 765-429-0398
	US Fax 312-264-0205
	AUS Phone 61-42-4157-491
	AUS Fax 61-29-4750-026
	<http://www.bleedingthreats.net> http://www.bleedingthreats.net
	--------------------------------------------
	
	PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc

	 

	 

	--------------------------
	
	PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc

	 

	 

	
------------------------------------------------------------------------
-
	This SF.net email is sponsored by: Splunk Inc.
	Still grepping through log files to find problems?  Stop.
	Now Search log events and configuration files using AJAX and a
browser.
	Download your FREE copy of Splunk now >>
<http://get.splunk.com/>  http://get.splunk.com/
<http://get.splunk.com/> 

	_______________________________________________
	Snort-users mailing list
	Snort-users at lists.sourceforge.net
	Go to this URL to change user options or unsubscribe:
	https://lists.sourceforge.net/lists/listinfo/snort-users
	Snort-users list archive:
	http://www.geocrawler.com/redir-sf.php3?list=snort-users

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20070731/b06e55dc/attachment.html>


More information about the Snort-users mailing list