Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]

Re: [Snort-users] This is a new one

Subject: Re: [Snort-users] This is a new one
Date: Tue, 31 Jul 2007 08:01:45 -0500
Thanks, Joel.  I will do that and start over.


Dwane

 

________________________________

From: Joel Esler [mailto:joel.esler@sourcefire.com] 
Sent: Tuesday, July 31, 2007 8:01 AM
To: Atkins, Dwane P
Cc: Atkins, Dwane P; Will Metcalf; Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one

 

If you are trying to compile from a tarball,  and you haven't moved the
files around,  just delete the expanded directory that the tarball made
when you expanded it.  

 

You can also descend into the directory before you delete it and type
'make uninstall'  which will remove any files it may have moved into the
bin directories,  etc.

--

Joel Esler

Sent from the road.


On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD@uthscsa.edu>
wrote:

        Do you think I should start with a fresh system?  Is there a way
to do a complete uninstall of the snort application?  I do not want to
remove base and mysql, just clean up the snort install since I have run
it from two separate directories.

         

        Thanks to all,

        
        Dwane

         

        
________________________________


        From: snort-users-bounces@lists.sourceforge.net
[mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of Atkins,
Dwane P
        Sent: Monday, July 30, 2007 4:10 PM
        To: Will Metcalf
        Cc: <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
        Subject: Re: [Snort-users] This is a new one

         

        Yes on the checking and no on the -DENABLE_MYSQL.

         

        Do I do a ./configure -with-mysql -enable-dynamic-plugins, make
and then a make distclean?

        
        Dwane

         

        
________________________________


        From: Will Metcalf [mailto:william.metcalf@gmail.com] 
        Sent: Friday, July 27, 2007 7:28 PM
        To: Atkins, Dwane P
        Cc: Matt Jonkman; <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
        Subject: Re: [Snort-users] This is a new one

         

        yeah it just cleans it if you have already built snort.  Do you
see the following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?
        
        checking for mysql... yes
        checking for compress in -lz... yes
        
        and 
        
        -DENABLE_MYSQL 
        
        when you run make?

        On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD@uthscsa.edu>
ATKINSD@uthscsa.edu> wrote: 

        I just tried that in both directories and received this error:

         

        make: *** No rule to make target `distclean'.  Stop.

         

        Thanks

         

        Dwane

         

        
________________________________


        From: Will Metcalf [mailto: <mailto:william.metcalf@gmail.com>
william.metcalf@gmail.com] 
        Sent: Friday, July 27, 2007 6:46 PM
        To: Atkins, Dwane P
        Cc: Matt Jonkman; <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net 

        
        Subject: Re: [Snort-users] This is a new one

         

        make distclean && ./configure --with-mysql

        On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD@uthscsa.edu>
ATKINSD@uthscsa.edu> wrote: 

        I did recompile and still go the same message.  I download the
tarball
        that Will sent out and then I did a ./configure, make and make
install. 
        I then noticed the error and did a ./configure --with-mysql
        --enable-dynamicplugins, make and make install and still
received the
        same error.
        
        Any ideas will be helpful.
        
        Thanks
        
        Dwane
        
        -----Original Message----- 
        From: Matt Jonkman [mailto: <mailto:jonkman@bleedingthreats.net>
jonkman@bleedingthreats.net]
        Sent: Friday, July 27, 2007 5:58 PM
        To: Will Metcalf
        Cc: Atkins, Dwane P; <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
        Subject: Re: [Snort-users] This is a new one
        
        Looks like you need to compile with --with-mysql.
        
        Will Metcalf wrote:
        > What exactly did you download?
        >
        > Regards, 
        >
        > Will
        >
        >
        > On 7/27/07, *Atkins, Dwane P* < <mailto:ATKINSD@uthscsa.edu>
ATKINSD@uthscsa.edu
        > <mailto: <mailto:ATKINSD@uthscsa.edu> ATKINSD@uthscsa.edu>>
wrote: 
        >
        >     Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this
build of
        >     snort was obtained as a binary distribution (e.g., rpm, or
        Windows),
        >     then check for alternate builds that contains the
necessary 
        'mysql'
        >     support.  If this build of snort was compiled by you, then
re-run
        >     the ./configure script using the '--with-mysql' switch.
For
        >     non-standard installations of a database, the
'--with-mysql=DIR' 
        >     syntax may need to be used to specify the base directory
of the DB
        >     install.  See the database documentation for cursory
details
        >     (doc/README.database). and the URL to the most recent
database 
        >     plugin documentation.
        >
        >
        >
        >     I recently installed the latest snortsam patches and I
have a
        >     feeling that the new patch installs snort.  I am trying to
find
        out
        >     how to get around this.  Maybe someone can help. 
        >
        >
        >
        >     Dwane
        >
        >
        >
        >
        >
        >
        >
        
------------------------------------------------------------------------
        -
        >     This SF.net email is sponsored by: Splunk Inc. 
        >     Still grepping through log files to find problems?  Stop.
        >     Now Search log events and configuration files using AJAX
and a
        browser.
        >     Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
        >     _______________________________________________
        >     Snort-users mailing list
        >     <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net 
        >     <mailto: <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net>
        >     Go to this URL to change user options or unsubscribe:
        >     <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
        >     Snort-users
        >
        <
<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>
https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users >
        >     list archive:
        >     <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
        >     <
<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users>
        >
        >
        >
        >
        
------------------------------------------------------------------------
        >
        >
        
------------------------------------------------------------------------

        -
        > This SF.net email is sponsored by: Splunk Inc.
        > Still grepping through log files to find problems?  Stop.
        > Now Search log events and configuration files using AJAX and a
        browser.
        > Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
        >
        >
        >
        
------------------------------------------------------------------------
        >
        > _______________________________________________ 
        > Snort-users mailing list
        > <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
        > Go to this URL to change user options or unsubscribe:
        > <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
        > Snort-users list archive:
        > <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users 
        
        --
        --------------------------------------------
        Matthew Jonkman
        Bleeding Edge Threats
        US Phone 765-429-0398
        US Fax 312-264-0205
        AUS Phone 61-42-4157-491
        AUS Fax 61-29-4750-026
        <http://www.bleedingthreats.net> http://www.bleedingthreats.net
        --------------------------------------------
        
        PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc

         

         

        --------------------------
        
        PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc

         

         

        
------------------------------------------------------------------------
-
        This SF.net email is sponsored by: Splunk Inc.
        Still grepping through log files to find problems?  Stop.
        Now Search log events and configuration files using AJAX and a
browser.
        Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/

        _______________________________________________
        Snort-users mailing list
        Snort-users@lists.sourceforge.net
        Go to this URL to change user options or unsubscribe:
        https://lists.sourceforge.net/lists/listinfo/snort-users
        Snort-users list archive:
        http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
<Prev in Thread] Current Thread [Next in Thread>