[Snort-users] Weird happenings

Burks, Doug doug.burks at ...14446...
Mon Apr 19 12:24:05 EDT 2010


Can you verify that "make install" installed the snort binary to /usr/local/bin/ with the following command?
ls -alh /usr/local/bin/snort
 
Are you just running "snort" without the full path (and without /usr/local/bin/ in your $PATH)?  What happens if you run the following:
/usr/local/bin/snort -V
 
Doug

________________________________

From: redwookie at ...11827... [mailto:redwookie at ...11827...] 
Sent: Monday, April 19, 2010 12:18 PM
To: Joel Esler; redwookie at ...11827...
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Weird happenings


I appreciate the obvious suggestions. I redid everything, starting with make distclean. ./configure --enable-inline --enable-sourcefire --enable-reload. make. make install.

Same results - command not found.
-Erik

On Apr 19, 2010 11:29am, Joel Esler <jesler at ...1935...> wrote:
> Did you run "make install"?
> 
> 
> 
> Don't want to ask the obvious questions, but sometimes it's the little things that we miss.
> 
> 
> 
> --
> 
> Sent from my iPad
> 
> AIM: eslerjoel
> 
> 
> 
> On Apr 19, 2010, at 10:58 AM, redwookie at ...11827... wrote:
> 
> 
> 
> > Sorry, I remember that now. Though I had already saved that, but seems I was wrong.
> 
> > Anyway, I was able to successfully configure and make, but when all said and done, it is still giving me the "-bash: snort: command not found" problem.
> 
> > -Erik
> 
> >
> 
> > On Apr 19, 2010 10:44am, Russ Combs rcombs at ...1935...> wrote:
> 
> > > This one came up before ... try adding this line to the inline.c includes:
> 
> > >
> 
> > > #include
> 
> > >
> 
> > > Snort has to work around a broken include.
> 
> > >
> 
> > > Russ
> 
> > >
> 
> > > On Mon, Apr 19, 2010 at 8:43 AM, redwookie at ...11827...> wrote:
> 
> > >
> 
> > > I had set-up a Snort box running on RHEL 5.4 and all was good. Now it is a few weeks alter, and I am not sure what happened but I went to check the Snort and it was not running. When I tried to restart, I go the error: "-bash: snort: command not found". Not knowing what could've happened, because all the files and configs and what-not are where I expect them to be. So I tried to recompile (make distclean, ./configure --enable-sourcefire --enable-reload --enable-inline), thinking a recent RHEL update may have messed things up, and during the make I get the following:
> 
> > >
> 
> > > inline.c: In function âRejectLayer2â:
> 
> > > inline.c:591: error: dereferencing pointer to incomplete type
> 
> > > make[3]: *** [inline.o] Error 1
> 
> > > HUH? Any ideas on what's going on here and how do i fix this so I can get this back online?
> 
> > >
> 
> > > V/r,
> 
> > > Erik
> 
> > > ------------------------------------------------------------------------------
> 
> > >
> 
> > > Download Intel® Parallel Studio Eval
> 
> > >
> 
> > > Try the new software tools for yourself. Speed compiling, find bugs
> 
> > >
> 
> > > proactively, and fine-tune applications for parallel performance.
> 
> > >
> 
> > > See why Intel Parallel Studio got high marks during beta.
> 
> > >
> 
> > > http://p.sf.net/sfu/intel-sw-dev
> 
> > > _______________________________________________
> 
> > >
> 
> > > Snort-users mailing list
> 
> > >
> 
> > > Snort-users at lists.sourceforge.net
> 
> > >
> 
> > > Go to this URL to change user options or unsubscribe:
> 
> > >
> 
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> 
> > >
> 
> > > Snort-users list archive:
> 
> > >
> 
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> > >
> 
> > >
> 
> > >
> 
> > ------------------------------------------------------------------------------
> 
> > Download Intel® Parallel Studio Eval
> 
> > Try the new software tools for yourself. Speed compiling, find bugs
> 
> > proactively, and fine-tune applications for parallel performance.
> 
> > See why Intel Parallel Studio got high marks during beta.
> 
> > http://p.sf.net/sfu/intel-sw-dev
> 
> > _______________________________________________
> 
> > Snort-users mailing list
> 
> > Snort-users at lists.sourceforge.net
> 
> > Go to this URL to change user options or unsubscribe:
> 
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> 
> > Snort-users list archive:
> 
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100419/0a705459/attachment.html>


More information about the Snort-users mailing list