[Snort-users] problems installing snort with mysql on Ubuntu server 8.04 (UNCLASSIFIED)

Douglas Burks doug.burks at ...14446...
Tue Oct 21 16:45:06 EDT 2008


In addition to those packages, I also have libmysqlclient15-dev.

Doug


On 10/21/08 4:22 PM, "Craig" <reswob10 at ...11827...> wrote:

> Classification:  UNCLASSIFIED
> Caveats: NONE
> 
> 
> 
>  
> That didn't work.
> 
> As far as installed mysql packages:
> 
> After running the command:  dpkg -l | grep mysql
> 
> this is the list I get:
> 
> ii  libdbd-mysql-perl                     4.005-1                     A
> Perl5 database interface to the MySQL data
> ii  libmysqlclient15off                   5.0.51a-3ubuntu5.1          MySQL
> database client library
> ii  mysql-client-5.0                      5.0.51a-3ubuntu5.1          MySQL
> database client binaries
> ii  mysql-common                          5.0.51a-3ubuntu5.1          MySQL
> database common files
> ii  mysql-server                          5.0.51a-3ubuntu5.1          MySQL
> database server (meta package dependin
> ii  mysql-server-5.0                      5.0.51a-3ubuntu5.1          MySQL
> database server binaries
> ii  php5-mysql                            5.2.4-2ubuntu5.3            MySQL
> module for php5
> 
> 
> 
> 
> 
> Craig L. Bowser
> CISSP  SANS GSEC (Gold)
> -------------------------------
> Don't be irreplaceable. If you can't be replaced, you can't be promoted.
> 
> -----Original Message-----
> From: Douglas Burks [mailto:doug.burks at ...14446...]
> Sent: Tuesday, October 21, 2008 16:01
> To: Craig; snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] problems installing snort with mysql on Ubuntu
> server 8.04 (UNCLASSIFIED)
> 
> I had a similar problem and was able to resolve it by changing line 2556 in
> the configure file.  I changed the line from this:
> LIBS="${LIBS} -lz -lssl -lmysqlclient"
> To this:
> LIBS="${LIBS} -lmysqlclient"
> 
> Doug
> 
> 
> On 10/21/08 3:48 PM, "Craig" <reswob10 at ...11827...> wrote:
> 
>> Classification:  UNCLASSIFIED
>> Caveats: NONE
>> 
>> 
>> 
>> OK.  I've been working on this for two whole days.  Here's my problem
>> in a
>> nutshell:
>> 
>> Installation of barnyard with mysql fails at this point:
>> 
>> checking for
>> /root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/mysql//mysql.h.
>> .. yes checking for mysql_real_connect in -lmysqlclient... no
>> 
>> 
>> **********************************************
>>   ERROR: unable to find mysqlclient library
>>   checked in the following places
>> **********************************************
>> 
>> Lengthy history of what I've tried and done prior to this:
>> 
>> 
>> Prior to this I looked at several how-to's from the following locations:
>> 
>> http://www.howtoforge.com/intrusion_detection_base_snort
>> http://www.snort.org/docs/setup_guides/deb-snort-howto.pdf
>> http://linux.justinhartman.com/Intrusion_Detection_using_BASE_and_Snor
>> t
>> 
>> First, I installed Ubuntu Server 8.04 with LAMP and SSH server.
>> I then updated all sources and upgraded all installed packages I then
>> downloaded the latest Snort, PCRE, LIBPCAP, BASE and ADOdb.
>> To get libpcap to configure and install, I first had to run the following:
>> 
>> sudo apt-get install gcc g++ libc6-dev make flex bison libpcap-dev
>> 
>> After that, libpcap installed no problem.  But when I tried to install
>> Snort with the following command:
>> 
>> sudo ./configure --enable-dynamicplugin --with-mysql
>> 
>> it complained about not finding the mysql headers.  So I amended the
>> command
>> to:
>> 
>> sudo ./configure --enable-dynamicplugin --with-mysql
>> --with-mysql-includes=./snort-2.8.3.1/src/win32/WIN32-Includes/mysql/
>> 
>> which is the directory where mysql.h was located.  Then, I got the
>> following
>> error:
>> 
>> checking for dlsym in -ldl... no
>> checking for dlsym in -lc... no
>> 
>>     ERROR!  programmatic interface to dynamic link loader
>>     not found.  Cannot use dynamic plugin libraries."
>> 
>> More searching found several recommendations against configuring snort
>> with mysql.  So I tried again without mysql and it worked.  Great.  So
>> I then obtained the latest version of barnyard and attempted to install
> that.
>> 
>> But when I ran the following command:
>> 
>> sudo ./configure --enable-mysql
>> -with-mysql-includes=/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Inc
>> ludes/
>> mysql
>> 
>> I got the following error:
>> 
>> checking for
>> /root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/mysql/mysql.h..
>> . yes checking for mysql_real_connect in -lmysqlclient... no
>> 
>> 
>> **********************************************
>>   ERROR: unable to find mysqlclient library
>>   checked in the following places
>> **********************************************
>> 
>> 
>> Any suggestions?
>> 
>> Thanks.
>> 
>> 
>> Craig L. Bowser
>> CISSP  SANS GSEC (Gold)
>> craig.bowser1 at us dot army dot mil
>> -------------------------------
>> If you wish to be a success in the world, promise everything, deliver
>> nothing. - Napoleon Bonaparte
>> Classification:  UNCLASSIFIED
>> Caveats: NONE
>> 
>> 
>> 
>> ----------------------------------------------------------------------
>> --- This SF.Net email is sponsored by the Moblin Your Move Developer's
>> challenge Build the coolest Linux based applications with Moblin SDK &
>> win great prizes Grand prize is a trip for two to an Open Source event
>> anywhere in the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> Classification:  UNCLASSIFIED
> Caveats: NONE
> 
> 
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list