Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Snort-users] This is a new one

from [Will Metcalf] Network Security [Permanent Link]
Subject: Re: [Snort-users] This is a new one
Date: Tue, 31 Jul 2007 08:16:55 -0500 
Yeah, you can also re-run ./autojunk.sh  from  source and try again.  You
will need the tools included in that script though.

Regards,

Will

On 7/31/07, Atkins, Dwane P <ATKINSD@uthscsa.edu> wrote:


 Thanks, Joel.  I will do that and start over.


Dwane


 ------------------------------

*From:* Joel Esler [mailto:joel.esler@sourcefire.com]
*Sent:* Tuesday, July 31, 2007 8:01 AM
*To:* Atkins, Dwane P
*Cc:* Atkins, Dwane P; Will Metcalf; Snort-users@lists.sourceforge.net
*Subject:* Re: [Snort-users] This is a new one



If you are trying to compile from a tarball,  and you haven't moved the
files around,  just delete the expanded directory that the tarball made when
you expanded it.



You can also descend into the directory before you delete it and type
'make uninstall'  which will remove any files it may have moved into the bin
directories,  etc.

--

Joel Esler

Sent from the road.


On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD@uthscsa.edu>
wrote:

 Do you think I should start with a fresh system?  Is there a way to do a
complete uninstall of the snort application?  I do not want to remove base
and mysql, just clean up the snort install since I have run it from two
separate directories.



Thanks to all,


Dwane


 ------------------------------

*From:* snort-users-bounces@lists.sourceforge.net [mailto:
snort-users-bounces@lists.sourceforge.net] *On Behalf Of *Atkins, Dwane P
*Sent:* Monday, July 30, 2007 4:10 PM
*To:* Will Metcalf
*Cc:* <Snort-users@lists.sourceforge.net>Snort-users@lists.sourceforge.net
*Subject:* Re: [Snort-users] This is a new one



Yes on the checking and no on the –DENABLE_MYSQL.



Do I do a ./configure –with-mysql –enable-dynamic-plugins, make and then a
make distclean?


Dwane


 ------------------------------

*From:* Will Metcalf [mailto:william.metcalf@gmail.com]
*Sent:* Friday, July 27, 2007 7:28 PM
*To:* Atkins, Dwane P
*Cc:* Matt Jonkman; <Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
*Subject:* Re: [Snort-users] This is a new one



yeah it just cleans it if you have already built snort.  Do you see the
following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?

checking for mysql... yes
checking for compress in -lz... yes

and

-DENABLE_MYSQL

when you run make?

On 7/27/07, *Atkins, Dwane P* < <ATKINSD@uthscsa.edu>ATKINSD@uthscsa.edu>
wrote:

I just tried that in both directories and received this error:



make: *** No rule to make target `distclean'.  Stop.



Thanks



Dwane


 ------------------------------

*From:* Will Metcalf [mailto: <william.metcalf@gmail.com>
william.metcalf@gmail.com]
*Sent:* Friday, July 27, 2007 6:46 PM
*To:* Atkins, Dwane P
*Cc:* Matt Jonkman; <Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net


*Subject:* Re: [Snort-users] This is a new one



make distclean && ./configure --with-mysql

On 7/27/07, *Atkins, Dwane P* < <ATKINSD@uthscsa.edu>ATKINSD@uthscsa.edu>
wrote:

I did recompile and still go the same message.  I download the tarball
that Will sent out and then I did a ./configure, make and make install.
I then noticed the error and did a ./configure --with-mysql
--enable-dynamicplugins, make and make install and still received the
same error.

Any ideas will be helpful.

Thanks

Dwane

-----Original Message-----
From: Matt Jonkman [mailto: <jonkman@bleedingthreats.net>
jonkman@bleedingthreats.net]
Sent: Friday, July 27, 2007 5:58 PM
To: Will Metcalf
Cc: Atkins, Dwane P; <Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one

Looks like you need to compile with --with-mysql.

Will Metcalf wrote:

What exactly did you download?

Regards,

Will


On 7/27/07, *Atkins, Dwane P* < <ATKINSD@uthscsa.edu>ATKINSD@uthscsa.edu
<mailto: <ATKINSD@uthscsa.edu>ATKINSD@uthscsa.edu>> wrote:

    Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this build of
    snort was obtained as a binary distribution (e.g., rpm, or

Windows),

    then check for alternate builds that contains the necessary

'mysql'

    support.  If this build of snort was compiled by you, then re-run
    the ./configure script using the '--with-mysql' switch. For
    non-standard installations of a database, the '--with-mysql=DIR'
    syntax may need to be used to specify the base directory of the DB
    install.  See the database documentation for cursory details
    (doc/README.database). and the URL to the most recent database
    plugin documentation.



    I recently installed the latest snortsam patches and I have a
    feeling that the new patch installs snort.  I am trying to find

out

    how to get around this.  Maybe someone can help.



    Dwane








------------------------------------------------------------------------
-

    This SF.net email is sponsored by: Splunk Inc.
    Still grepping through log files to find problems?  Stop.
    Now Search log events and configuration files using AJAX and a

browser.

    Download your FREE copy of Splunk now >>   <http://get.splunk.com/>

http://get.splunk.com/

    _______________________________________________
    Snort-users mailing list
    <Snort-users@lists.sourceforge.net>Snort-users@lists.sourceforge.net
    <mailto: <Snort-users@lists.sourceforge.net>

Snort-users@lists.sourceforge.net>

    Go to this URL to change user options or unsubscribe:
    <https://lists.sourceforge.net/lists/listinfo/snort-users>

https://lists.sourceforge.net/lists/listinfo/snort-users

    Snort-users


< <https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>
https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users >

    list archive:
    <http://www.geocrawler.com/redir-sf.php3?list=snort-users>

http://www.geocrawler.com/redir-sf.php3?list=snort-users

    < <http://www.geocrawler.com/redir-sf.php3?list=snort-users>

http://www.geocrawler.com/redir-sf.php3?list=snort-users>






------------------------------------------------------------------------




------------------------------------------------------------------------
-

This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a

browser.

Download your FREE copy of Splunk now >>   <http://get.splunk.com/>

http://get.splunk.com/





------------------------------------------------------------------------


_______________________________________________
Snort-users mailing list
<Snort-users@lists.sourceforge.net>Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
<https://lists.sourceforge.net/lists/listinfo/snort-users>

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:
<http://www.geocrawler.com/redir-sf.php3?list=snort-users>

http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
US Phone 765-429-0398
US Fax 312-264-0205
AUS Phone 61-42-4157-491
AUS Fax 61-29-4750-026
 <http://www.bleedingthreats.net>http://www.bleedingthreats.net
--------------------------------------------

PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc





--------------------------

PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc





 -------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>   <http://get.splunk.com/>
http://get.splunk.com/

 _______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: [Snort-users] This is a new one, Atkins, Dwane P
Next by Date:  Re: [Snort-users] This is a new one, Atkins, Dwane P
Previous by Thread:  Re: [Snort-users] This is a new one, Atkins, Dwane P
Next by Thread:  Re: [Snort-users] This is a new one, Atkins, Dwane P
Indexes:  [Date] [Thread] [Top] [All Lists]