[Snort-users] Weird happenings

Russ Combs rcombs at ...1935...
Tue Apr 20 12:35:11 EDT 2010


Are you configuring with a --prefix?  Can you send config.log and a capture
of your build output?  (Eg sudo make clean; sudo make install &> make.out.)

On Tue, Apr 20, 2010 at 12:30 PM, <redwookie at ...11827...> wrote:

> Sorry for the delayed response.
> no I cannot execute snort -V in any location, be it src or otherwise.
> I did the config, make and make install as root.
> rrgggh.
> -Erik
>
>
> On Apr 19, 2010 2:57pm, Russ Combs <rcombs at ...1935...> wrote:
> > Can you execute src/snort -V?
> >
> > Did you sudo make install?
> >
> > On Mon, Apr 19, 2010 at 2:43 PM, Red Wookie redwookie at ...11827...> wrote:
> >
> > Output of which snort:
> >
> > /usr/bin/which: no snort in
> >
> >
> (/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin)
> >
> >
> >
> > So this is telling me that even though I did a make install, it did
> >
> > not in fact, install anywhere?  So where did I go wrong with this?  It
> >
> > was working two weeks ago and something happened (maybe a RHEL update)
> >
> > and now this.
> >
> >
> >
> > Getting ready to format reinstall if I can't figure this out.
> >
> >
> >
> > -Erik
> >
> >
> >
> >
> > On Mon, Apr 19, 2010 at 12:37, Russ Combs rcombs at ...1935...> wrote:
> >
> > > Are you trying to start Snort with a script?  What is the path it is
> using?
> >
> > > By default, you should find snort in /usr/local/bin.  Does `which
> snort`
> >
> > > find a snort in the place you/your script expects?
> >
> > >
> >
> > > On Mon, Apr 19, 2010 at 12:17 PM, redwookie at ...11827...> wrote:
> >
> > >>
> >
> > >> I appreciate the obvious suggestions. I redid everything, starting
> with
> >
> > >> make distclean. ./configure --enable-inline --enable-sourcefire
> >
> > >> --enable-reload. make. make install.
> >
> > >>
> >
> > >> Same results - command not found.
> >
> > >> -Erik
> >
> > >>
> >
> > >> On Apr 19, 2010 11:29am, Joel Esler jesler at ...1935...> wrote:
> >
> > >> > Did you run "make install"?
> >
> > >> >
> >
> > >> >
> >
> > >> >
> >
> > >> > Don't want to ask the obvious questions, but sometimes it's the
> little
> >
> > >> > things that we miss.
> >
> > >> >
> >
> > >> >
> >
> > >> >
> >
> > >> > --
> >
> > >> >
> >
> > >> > Sent from my iPad
> >
> > >> >
> >
> > >> > AIM: eslerjoel
> >
> > >> >
> >
> > >> >
> >
> > >> >
> >
> > >> > On Apr 19, 2010, at 10:58 AM, redwookie at ...11827... wrote:
> >
> > >> >
> >
> > >> >
> >
> > >> >
> >
> > >> > > Sorry, I remember that now. Though I had already saved that, but
> seems
> >
> > >> > > I was wrong.
> >
> > >> >
> >
> > >> > > Anyway, I was able to successfully configure and make, but when
> all
> >
> > >> > > said and done, it is still giving me the "-bash: snort: command
> not found"
> >
> > >> > > problem.
> >
> > >> >
> >
> > >> > > -Erik
> >
> > >> >
> >
> > >> > >
> >
> > >> >
> >
> > >> > > On Apr 19, 2010 10:44am, Russ Combs rcombs at ...1935...> wrote:
> >
> > >> >
> >
> > >> > > > This one came up before ... try adding this line to the inline.c
> >
> > >> > > > includes:
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > #include
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Snort has to work around a broken include.
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Russ
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > On Mon, Apr 19, 2010 at 8:43 AM, redwookie at ...11827...> wrote:
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > I had set-up a Snort box running on RHEL 5.4 and all was good.
> Now
> >
> > >> > > > it is a few weeks alter, and I am not sure what happened but I
> went to check
> >
> > >> > > > the Snort and it was not running. When I tried to restart, I go
> the error:
> >
> > >> > > > "-bash: snort: command not found". Not knowing what could've
> happened,
> >
> > >> > > > because all the files and configs and what-not are where I
> expect them to
> >
> > >> > > > be. So I tried to recompile (make distclean, ./configure
> --enable-sourcefire
> >
> > >> > > > --enable-reload --enable-inline), thinking a recent RHEL update
> may have
> >
> > >> > > > messed things up, and during the make I get the following:
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > inline.c: In function âRejectLayer2â:
> >
> > >> >
> >
> > >> > > > inline.c:591: error: dereferencing pointer to incomplete type
> >
> > >> >
> >
> > >> > > > make[3]: *** [inline.o] Error 1
> >
> > >> >
> >
> > >> > > > HUH? Any ideas on what's going on here and how do i fix this so
> I
> >
> > >> > > > can get this back online?
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > V/r,
> >
> > >> >
> >
> > >> > > > Erik
> >
> > >> >
> >
> > >> > > >
> >
> > >> > > >
> ------------------------------------------------------------------------------
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Download Intel® Parallel Studio Eval
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Try the new software tools for yourself. Speed compiling, find
> bugs
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > proactively, and fine-tune applications for parallel
> performance.
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > See why Intel Parallel Studio got high marks during beta.
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > http://p.sf.net/sfu/intel-sw-dev
> >
> > >> >
> >
> > >> > > > _______________________________________________
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Snort-users mailing list
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Snort-users at lists.sourceforge.net
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Go to this URL to change user options or unsubscribe:
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > Snort-users list archive:
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > > >
> >
> > >> >
> >
> > >> > >
> >
> > >> > >
> ------------------------------------------------------------------------------
> >
> > >> >
> >
> > >> > > Download Intel® Parallel Studio Eval
> >
> > >> >
> >
> > >> > > Try the new software tools for yourself. Speed compiling, find
> bugs
> >
> > >> >
> >
> > >> > > proactively, and fine-tune applications for parallel performance.
> >
> > >> >
> >
> > >> > > See why Intel Parallel Studio got high marks during beta.
> >
> > >> >
> >
> > >> > > http://p.sf.net/sfu/intel-sw-dev
> >
> > >> >
> >
> > >> > > _______________________________________________
> >
> > >> >
> >
> > >> > > Snort-users mailing list
> >
> > >> >
> >
> > >> > > Snort-users at lists.sourceforge.net
> >
> > >> >
> >
> > >> > > Go to this URL to change user options or unsubscribe:
> >
> > >> >
> >
> > >> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> >
> > >> >
> >
> > >> > > Snort-users list archive:
> >
> > >> >
> >
> > >> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> > >> >
> >
> > >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > --
> >
> > http://www.linkedin.com/in/ekmartin
> >
> >
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100420/4e2e95e6/attachment.html>


More information about the Snort-users mailing list