[Snort-users] MySQL support for Snort 2.9.4

Kaya Saman kayasaman at ...11827...
Mon Dec 10 23:37:34 EST 2012


On 12/11/2012 04:29 AM, Jeremy Hoel wrote:
> All those lovely flags..  yeah openBSD.  :-)
>
> But I'm really glad you got it working.. that's great.

Thanks for all the help!

This is a first for me being helped by someone in a 'drive through' too 
which adds to the occasion :-)

Though you might see me soon next time you "drive through": "can I take 
your order sir?"


Best regards,


Kaya


>
> On Mon, Dec 10, 2012 at 9:27 PM, Kaya Saman <kayasaman at ...11827...> wrote:
>> On 12/11/2012 03:09 AM, Jeremy Hoel wrote:
>>> On Mon, Dec 10, 2012 at 8:06 PM, Kaya Saman <kayasaman at ...11827...> wrote:
>>>> On 12/11/2012 03:01 AM, Jeremy Hoel wrote:
>>>>> On Mon, Dec 10, 2012 at 7:47 PM, Kaya Saman <kayasaman at ...11827...> wrote:
>>>>>> On 12/11/2012 02:39 AM, Jeremy Hoel wrote:
>>>>>>
>>>>>> Emailing and driving? That's a new one
>>>>>>
>>>>>> hahaa..  drive through..  takes forever!
>>>>>>
>>>>>>
>>>>>> Better that then "drive-by" LOL
>>>>>>
>>>>>>> [...]
>>>>>>>
>>>>>>> Can you paste your snort.conf?
>>>>>>
>>>>>> Attached:
>>>>> Do you have ipv6 enabled?
>>>>>
>>>>> Have you tried moving that file out of the directory and seeing it
>>>>> works?
>>>>
>>>> IPv6 is enabled and IPv6 routing is enabled too.... (since the box is a
>>>> gateway/router)
>>>>
>>>> Which is the file, by the name I'm guessing:
>>>>
>>>> libsf_ssl_preproc.a
>>>> libsf_ssl_preproc.la
>>>> libsf_ssl_preproc.so
>>>> libsf_ssl_preproc.so.0.0
>>>>
>>>> ??
>>> HUmm.. I would think it would be the .so file, but are all four of
>>> those in the preprocessor folder?
>>>
>>> I'm about at a loss.. I haven't had this error before. I'm going to
>>> have to look at some things.. and maybe someone else has an idea.
>>
>> Ok looks like I got this working!
>>
>> Steps I took:
>>
>> cd /usr/local/lib/snort_dynamicpreprocessor/
>> rm -rf *
>> cd /<snort-2.9.3.1>/path
>> make clean
>> ./cfg.sh
>> make
>> make install
>>
>> cfg.sh file contains:
>>
>> ./configure --enable-sourcefire --with-libpcap-libraries=/usr/local/lib
>> --with-libpcap-includes=/usr/local/include \
>> --with-daq-includes=/usr/local/include --with-daq-libraries=/usr/local/lib
>> --disable-static-daq --enable-flexresp3 \
>> --enable-ipv6
>>
>>
>> Now Snort starts at least! :-)
>>
>>
>> Regards,
>>
>>
>> Kaya





More information about the Snort-users mailing list