What did was go into my install directory, remove the extracted
directories and the untar the snort-snortsam-2.6.1.5.tar.gz, cd to that
directory, and then....
./configure -with-mysql
Make
Make install
Chkconfig snort on
Service snort start
And it worked. Now let me see if I can get the snortsam agent to
communicate with our snortsam box.
Thanks folks.
Dwane
________________________________
From: snort-users-bounces@lists.sourceforge.net
[mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of Atkins,
Dwane P
Sent: Tuesday, July 31, 2007 10:59 AM
To: Will Metcalf
Cc: Joel Esler; Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
When I do a make uninstall or make distclean, I get this error
make: *** No rule to make target `uninstall'. Stop or
make: *** No rule to make target `distclean'. Stop.
It doesn't look like anything is installed now, right?
________________________________
From: Will Metcalf [mailto:william.metcalf@gmail.com]
Sent: Tuesday, July 31, 2007 8:17 AM
To: Atkins, Dwane P
Cc: Joel Esler; Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
Yeah, you can also re-run ./autojunk.sh from source and try again.
You will need the tools included in that script though.
Regards,
Will
On 7/31/07, Atkins, Dwane P <ATKINSD@uthscsa.edu> wrote:
Thanks, Joel. I will do that and start over.
Dwane
________________________________
From: Joel Esler [mailto:joel.esler@sourcefire.com]
Sent: Tuesday, July 31, 2007 8:01 AM
To: Atkins, Dwane P
Cc: Atkins, Dwane P; Will Metcalf; Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
If you are trying to compile from a tarball, and you haven't moved the
files around, just delete the expanded directory that the tarball made
when you expanded it.
You can also descend into the directory before you delete it and type
'make uninstall' which will remove any files it may have moved into the
bin directories, etc.
--
Joel Esler
Sent from the road.
On Jul 31, 2007, at 7:45 AM, "Atkins, Dwane P" <ATKINSD@uthscsa.edu>
wrote:
Do you think I should start with a fresh system? Is there a way
to do a complete uninstall of the snort application? I do not want to
remove base and mysql, just clean up the snort install since I have run
it from two separate directories.
Thanks to all,
Dwane
________________________________
From: snort-users-bounces@lists.sourceforge.net
[mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of Atkins,
Dwane P
Sent: Monday, July 30, 2007 4:10 PM
To: Will Metcalf
Cc: <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
Yes on the checking and no on the -DENABLE_MYSQL.
Do I do a ./configure -with-mysql -enable-dynamic-plugins, make
and then a make distclean?
Dwane
________________________________
From: Will Metcalf [mailto: william.metcalf@gmail.com]
Sent: Friday, July 27, 2007 7:28 PM
To: Atkins, Dwane P
Cc: Matt Jonkman; <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
yeah it just cleans it if you have already built snort. Do you
see the following when you run ./configure --with-mysql in the
snort-snortsam-2.6.1.5 directory?
checking for mysql... yes
checking for compress in -lz... yes
and
-DENABLE_MYSQL
when you run make?
On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD@uthscsa.edu>
ATKINSD@uthscsa.edu <mailto:ATKINSD@uthscsa.edu> > wrote:
I just tried that in both directories and received this error:
make: *** No rule to make target `distclean'. Stop.
Thanks
Dwane
________________________________
From: Will Metcalf [mailto: <mailto:william.metcalf@gmail.com>
william.metcalf@gmail.com]
Sent: Friday, July 27, 2007 6:46 PM
To: Atkins, Dwane P
Cc: Matt Jonkman; <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
make distclean && ./configure --with-mysql
On 7/27/07, Atkins, Dwane P < <mailto:ATKINSD@uthscsa.edu>
ATKINSD@uthscsa.edu <mailto:ATKINSD@uthscsa.edu> > wrote:
I did recompile and still go the same message. I download the
tarball
that Will sent out and then I did a ./configure, make and make
install.
I then noticed the error and did a ./configure --with-mysql
--enable-dynamicplugins, make and make install and still
received the
same error.
Any ideas will be helpful.
Thanks
Dwane
-----Original Message-----
From: Matt Jonkman [mailto: <mailto:jonkman@bleedingthreats.net>
jonkman@bleedingthreats.net <mailto:jonkman@bleedingthreats.net> ]
Sent: Friday, July 27, 2007 5:58 PM
To: Will Metcalf
Cc: Atkins, Dwane P; <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] This is a new one
Looks like you need to compile with --with-mysql.
Will Metcalf wrote:
> What exactly did you download?
>
> Regards,
>
> Will
>
>
> On 7/27/07, *Atkins, Dwane P* < <mailto:ATKINSD@uthscsa.edu>
ATKINSD@uthscsa.edu <mailto:ATKINSD@uthscsa.edu>
> <mailto: <mailto:ATKINSD@uthscsa.edu> ATKINSD@uthscsa.edu
<mailto:ATKINSD@uthscsa.edu> >> wrote:
>
> Jul 27 11:29:52 Wilbur snort[3024]: FATAL ERROR: If this
build of
> snort was obtained as a binary distribution (e.g., rpm, or
Windows),
> then check for alternate builds that contains the
necessary
'mysql'
> support. If this build of snort was compiled by you, then
re-run
> the ./configure script using the '--with-mysql' switch.
For
> non-standard installations of a database, the
'--with-mysql=DIR'
> syntax may need to be used to specify the base directory
of the DB
> install. See the database documentation for cursory
details
> (doc/README.database). and the URL to the most recent
database
> plugin documentation.
>
>
>
> I recently installed the latest snortsam patches and I
have a
> feeling that the new patch installs snort. I am trying to
find
out
> how to get around this. Maybe someone can help.
>
>
>
> Dwane
>
>
>
>
>
>
>
------------------------------------------------------------------------
-
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX
and a
browser.
> Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
> _______________________________________________
> Snort-users mailing list
> <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
> <mailto: <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
<mailto:Snort-users@lists.sourceforge.net> >
> Go to this URL to change user options or unsubscribe:
> <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users
>
<
<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>
https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users
<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users> >
> list archive:
> <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> <
<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users>
>
>
>
>
------------------------------------------------------------------------
>
>
------------------------------------------------------------------------
-
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a
browser.
> Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
>
>
>
------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> <mailto:Snort-users@lists.sourceforge.net>
Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> <https://lists.sourceforge.net/lists/listinfo/snort-users>
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> <http://www.geocrawler.com/redir-sf.php3?list=snort-users>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
--
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
US Phone 765-429-0398
US Fax 312-264-0205
AUS Phone 61-42-4157-491
AUS Fax 61-29-4750-026
<http://www.bleedingthreats.net> http://www.bleedingthreats.net
--------------------------------------------
PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc
--------------------------
PGP: <http://www.bleedingthreats.com/mattjonkman.asc>
http://www.bleedingthreats.com/mattjonkman.asc
------------------------------------------------------------------------
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a
browser.
Download your FREE copy of Splunk now >>
<http://get.splunk.com/> http://get.splunk.com/
<http://get.splunk.com/>
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
