Snort mailing list archives

RE: SNMP Support in FreeBSD


From: twig les <twigles () yahoo com>
Date: Wed, 22 Oct 2003 10:43:23 -0700 (PDT)

OK, here's a little step to try before going any further in
troubleshooting this port problem:

%pwd
/usr/ports/security/snort
%grep -i snmp Makefile
%

When I built 1.9.x last year with SNMP I had to build from
source because the port didn't have anything about snmp in it. 
I kept my mouth shut bc that was a long time ago, but it seems
that this is still the case.  If anyone has evidence to the
contrary I tip my hat.



--- Keith Long <keith.long () air2web com> wrote:
All right, I nuked and paved with a vanilla 4.8 stable
installation.  I
updated the ports and installed autoconf, automake, and
net-snmp from ports.
Then I installed the snort 2.0.2 port.  As before everything
went smoothly
except for snmp support.  After building the port I looked at
plugbase.c and
did not see the snmp output plugin.  At any rate I took your
reply at face
value, I mean really and honestly this should be easy, and so
I gave it a
try.  I added the following line to my snmp.conf.

output trap_snmp: alert, 1, trap -v 2c -p 162 nms-mydomain.com
supersecret

And I get the following error when starting snort.

ERROR: unknown output plugin: trap_snmpFatal Error, Quitting..


1) Is there a way to 'patch' the port for the snmp plugin?
2) How can I avoid the aclocal errors previously mentioned
when building
from source code.

I am not trying to be difficult.  All I want is snort with
snmp support in
FreeBSD. 


-----Original Message-----
From: Michael Sierchio [mailto:kudzu () tenebras com] 
Sent: Tuesday, October 21, 2003 9:44 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] SNMP Support in FreeBSD

Keith Long wrote:

My ports are fairly new.  If I grabbed the latest ports I
would be
installing snort 2.0.2, which there doesn't seem to be an
snmp patch
for.

Perhaps because it doesn't require a patch? ;-)



-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product
knowledge
We want to know what you know. Tell us and you have a chance
to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product
knowledge
We want to know what you know. Tell us and you have a chance
to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Get a taste of Religion ... eat a priest!       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com


-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: