[Snort-users] Question regarding Barnyard2

Dheeraj Gupta dheeraj.gupta4 at ...11827...
Sun Jan 15 23:35:46 EST 2017


Hi,

Possibly a dumb suggestion but did you try a plain --with-mysql (no
capitalization) with ./configure
If you request MySQL support and configure cannot find required libraries,
it will fail with an error. However, if you supply --with-MySQL, configure
will possibly only show a warning (at the beginning) and then happily
continue with rest of configuration process.

I haven't compiled barnyard from source in a long time, but I think if you
look at configure output, you should see something like
"Checking for MySQL support"...yes
in the output
Also when you do a make, a MYSQL(or something similar) flag should be added
to each compile command printined during make process. (Something like
-DMYSQL)
If both these are not present, it points to the fact that configure was run
without request for MySQL support.

Regards,
Dheeraj

On Mon, Jan 16, 2017 at 9:57 AM, <snort-users-request at lists.sourceforge.net>
wrote:

> Send Snort-users mailing list submissions to
>         snort-users at lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.sourceforge.net/lists/listinfo/snort-users
> or, via email, send a message with subject or body 'help' to
>         snort-users-request at lists.sourceforge.net
>
> You can reach the person managing the list at
>         snort-users-owner at lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Snort-users digest..."
>
>
> When responding, please don't respond with the entire Digest.  Please trim
> your response.
>
> Today's Topics:
>
>    1. Re: Question regarding Barnyard2 (Bob Baller)
>    2. Re: Question regarding Barnyard2 (Noah Dietrich)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sun, 15 Jan 2017 13:02:48 -0600
> From: "Bob Baller" <bobballer at ...15978...>
> Subject: Re: [Snort-users] Question regarding Barnyard2
> To: "'Y M'" <snort at ...15979...>,        <snort-users at lists.sourceforge.net
> >
> Message-ID: <002401d26f61$f7088fd0$e519af70$@q.com>
> Content-Type: text/plain; charset="us-ascii"
>
> Thanks for the response.  Looking in Synaptic, I see the following
> installed:
>
>
>
> .         Libmysqlclient-dev
>
> .         libmysqlclient20
>
> Both of them are at version 5.7.16-0ubuntu0.16.04.1
>
>
>
> So here is possibly a dumb question:  Is it possible for something to be
> installed and not show up in Synaptic?
>
>
>
>
>
> From: Y M [mailto:snort at ...15979...]
> Sent: Sunday, January 15, 2017 9:05 AM
> To: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] Question regarding Barnyard2
>
>
>
> I "think" you have to also install libmysqlclient-dev or it's equivalent on
> your distro. I am not on a computer to validate.
>
>
>
> YM.
>
> _____________________________
> From: Bob Baller <bobballer at ...15978...>
> Sent: Sunday, January 15, 2017 12:32 AM
> Subject: [Snort-users] Question regarding Barnyard2
> To: <snort-users at lists.sourceforge.net>
>
>
>
>
>
> Hello,  I am having a problem getting Barnyard2 to work.  Snort seems to be
> working fine but I keep getting the following error when I attempt to run
> Barnyard:
>
> ERROR database: 'mysql' support is not compiled into this build of
> barnyard2
>
>
>
> ERROR: If this build of barnyard2 was obtained as a binary distribution
> (e.g., rpm,
>
> or Windows), then check for alternate builds that contains the necessary
>
> 'mysql' support.
>
>
>
> I've set '--with-MySql' and have reinstalled it many times.  I am clearly
> missing something
>
>
>
> I am running the following
>
>
>
> Linux Mint           ver 18 32bit
>
> MySql                   ver 5.7.16-0ubuntu0.16.04.1
>
> Snort                     ver 2.9.7.0-5
>
> Barnyard2           ver 2.1.14 Build 339
>
>
>
> I would appreciate any help.
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 2
> Date: Mon, 16 Jan 2017 06:27:04 +0200
> From: Noah Dietrich <noah_dietrich at ...17393...>
> Subject: Re: [Snort-users] Question regarding Barnyard2
> To: Bob Baller <bobballer at ...15978...>
> Cc: snort-users at lists.sourceforge.net
> Message-ID:
>         <CA+N0JEyRoey3ffnL9CeEWHhTSYRTYFLEZxXiiM5oWPzOL4m-nQ at ...17735...
> com>
> Content-Type: text/plain; charset="utf-8"
>
> These are the two sql libraries you need to install Barnyard2:
> sudo apt-get install -y mysql-server libmysqlclient-dev mysql-client
>
> I suspect that your issue is that you're not using the correct flag when
> you configure barnyard2.  The correct command is one of the following two
> lines (probably the second line, since you're on the x86 version of
> Ubuntu):
> ./configure --with-mysql --with-mysql-libraries=/usr/lib/x86_64-linux-gnu
> ./configure --with-mysql --with-mysql-libraries=/usr/lib/i386-linux-gnu
> this ensures that you are adding the correct mysql libraries.
>
> These instructions are from my Snort guide:
> http://sublimerobots.com/2017/01/snort-2-9-9-x-ubuntu-
> installing-barnyard2/
>
> On another note: the version of Snort that you are installing is really old
> (i'm assuming you're installing it from the repositories).  You probably
> want to install snort manually to get the latest (and supported) version.
> My guide is here for the 2.9.9.0 version (latest) release of snort on
> Ubuntu:
> http://sublimerobots.com/2017/01/snort-2-9-9-x-ubuntu-installing-snort/,
> along with barnyard2, PulledPork, and BASE.
>
> Noah
>
> On Sun, Jan 15, 2017 at 9:02 PM, Bob Baller <bobballer at ...15978...> wrote:
>
> > Thanks for the response.  Looking in Synaptic, I see the following
> > installed:
> >
> >
> >
> > ?         Libmysqlclient-dev
> >
> > ?         libmysqlclient20
> >
> > Both of them are at version 5.7.16-0ubuntu0.16.04.1
> >
> >
> >
> > So here is possibly a dumb question:  Is it possible for something to be
> > installed and not show up in Synaptic?
> >
> >
> >
> >
> >
> > *From:* Y M [mailto:snort at ...15979...]
> > *Sent:* Sunday, January 15, 2017 9:05 AM
> > *To:* snort-users at lists.sourceforge.net
> > *Subject:* Re: [Snort-users] Question regarding Barnyard2
> >
> >
> >
> > I "think" you have to also install libmysqlclient-dev or it's equivalent
> > on your distro. I am not on a computer to validate.
> >
> >
> >
> > YM.
> >
> > _____________________________
> > From: Bob Baller <bobballer at ...15978...>
> > Sent: Sunday, January 15, 2017 12:32 AM
> > Subject: [Snort-users] Question regarding Barnyard2
> > To: <snort-users at lists.sourceforge.net>
> >
> >
> >
> > Hello,  I am having a problem getting Barnyard2 to work.  Snort seems to
> > be working fine but I keep getting the following error when I attempt to
> > run Barnyard:
> >
> > ERROR database: 'mysql' support is not compiled into this build of
> > barnyard2
> >
> >
> >
> > ERROR: If this build of barnyard2 was obtained as a binary distribution
> > (e.g., rpm,
> >
> > or Windows), then check for alternate builds that contains the necessary
> >
> > 'mysql' support.
> >
> >
> >
> > I?ve set ?--with-MySql? and have reinstalled it many times.  I am clearly
> > missing something
> >
> >
> >
> > I am running the following
> >
> >
> >
> > Linux Mint           ver 18 32bit
> >
> > MySql                   ver 5.7.16-0ubuntu0.16.04.1
> >
> > Snort                     ver 2.9.7.0-5
> >
> > Barnyard2           ver 2.1.14 Build 339
> >
> >
> >
> > I would appreciate any help.
> >
> >
> >
> > ------------------------------------------------------------
> > ------------------
> > Developer Access Program for Intel Xeon Phi Processors
> > Access to Intel Xeon Phi processor-based developer platforms.
> > With one year of Intel Parallel Studio XE.
> > Training and support from Colfax.
> > Order your platform today. http://sdm.link/xeonphi
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> ------------------------------------------------------------
> ------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today. http://sdm.link/xeonphi
>
> ------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-users
>
>
> End of Snort-users Digest, Vol 128, Issue 24
> ********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170116/410b9b89/attachment.html>


More information about the Snort-users mailing list