Snort mailing list archives

Re: problems installing snort with mysql on Ubuntu server 8.04 (UNCLASSIFIED)


From: "Craig" <reswob10 () gmail com>
Date: Wed, 22 Oct 2008 09:05:00 -0400

Classification:  UNCLASSIFIED 
Caveats: NONE

 

That did it.  Thanks all.


Craig L. Bowser
CISSP           SANS GSEC (Gold)
-------------------------------
A budget is just a method of worrying before you spend money, as well as
afterward. - Anonymous

-----Original Message-----
From: Douglas Burks [mailto:doug.burks () morris com] 
Sent: Tuesday, October 21, 2008 16:45
To: Craig; snort-users () lists sourceforge net
Subject: Re: [Snort-users] problems installing snort with mysql on Ubuntu
server 8.04 (UNCLASSIFIED)

In addition to those packages, I also have libmysqlclient15-dev.

Doug


On 10/21/08 4:22 PM, "Craig" <reswob10 () gmail com> wrote:

Classification:  UNCLASSIFIED
Caveats: NONE



 
That didn't work.

As far as installed mysql packages:

After running the command:  dpkg -l | grep mysql

this is the list I get:

ii  libdbd-mysql-perl                     4.005-1                     A
Perl5 database interface to the MySQL data
ii  libmysqlclient15off                   5.0.51a-3ubuntu5.1
MySQL
database client library
ii  mysql-client-5.0                      5.0.51a-3ubuntu5.1
MySQL
database client binaries
ii  mysql-common                          5.0.51a-3ubuntu5.1
MySQL
database common files
ii  mysql-server                          5.0.51a-3ubuntu5.1
MySQL
database server (meta package dependin
ii  mysql-server-5.0                      5.0.51a-3ubuntu5.1
MySQL
database server binaries
ii  php5-mysql                            5.2.4-2ubuntu5.3
MySQL
module for php5





Craig L. Bowser
CISSP  SANS GSEC (Gold)
-------------------------------
Don't be irreplaceable. If you can't be replaced, you can't be promoted.

-----Original Message-----
From: Douglas Burks [mailto:doug.burks () morris com]
Sent: Tuesday, October 21, 2008 16:01
To: Craig; snort-users () lists sourceforge net
Subject: Re: [Snort-users] problems installing snort with mysql on 
Ubuntu server 8.04 (UNCLASSIFIED)

I had a similar problem and was able to resolve it by changing line 
2556 in the configure file.  I changed the line from this:
LIBS="${LIBS} -lz -lssl -lmysqlclient"
To this:
LIBS="${LIBS} -lmysqlclient"

Doug


On 10/21/08 3:48 PM, "Craig" <reswob10 () gmail com> wrote:

Classification:  UNCLASSIFIED
Caveats: NONE



OK.  I've been working on this for two whole days.  Here's my problem 
in a
nutshell:

Installation of barnyard with mysql fails at this point:

checking for
/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/mysql//mysql.h.
.. yes checking for mysql_real_connect in -lmysqlclient... no


**********************************************
  ERROR: unable to find mysqlclient library
  checked in the following places
**********************************************

Lengthy history of what I've tried and done prior to this:


Prior to this I looked at several how-to's from the following locations:

http://www.howtoforge.com/intrusion_detection_base_snort
http://www.snort.org/docs/setup_guides/deb-snort-howto.pdf
http://linux.justinhartman.com/Intrusion_Detection_using_BASE_and_Sno
r
t

First, I installed Ubuntu Server 8.04 with LAMP and SSH server.
I then updated all sources and upgraded all installed packages I then 
downloaded the latest Snort, PCRE, LIBPCAP, BASE and ADOdb.
To get libpcap to configure and install, I first had to run the
following:

sudo apt-get install gcc g++ libc6-dev make flex bison libpcap-dev

After that, libpcap installed no problem.  But when I tried to 
install Snort with the following command:

sudo ./configure --enable-dynamicplugin --with-mysql

it complained about not finding the mysql headers.  So I amended the 
command
to:

sudo ./configure --enable-dynamicplugin --with-mysql 
--with-mysql-includes=./snort-2.8.3.1/src/win32/WIN32-Includes/mysql/

which is the directory where mysql.h was located.  Then, I got the 
following
error:

checking for dlsym in -ldl... no
checking for dlsym in -lc... no

    ERROR!  programmatic interface to dynamic link loader
    not found.  Cannot use dynamic plugin libraries."

More searching found several recommendations against configuring 
snort with mysql.  So I tried again without mysql and it worked.  
Great.  So I then obtained the latest version of barnyard and 
attempted to install
that.

But when I ran the following command:

sudo ./configure --enable-mysql
-with-mysql-includes=/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-In
c
ludes/
mysql

I got the following error:

checking for
/root/snorttemp/snort-2.8.3.1/src/win32/WIN32-Includes/mysql/mysql.h..
. yes checking for mysql_real_connect in -lmysqlclient... no


**********************************************
  ERROR: unable to find mysqlclient library
  checked in the following places
**********************************************


Any suggestions?

Thanks.


Craig L. Bowser
CISSP  SANS GSEC (Gold)
craig.bowser1 at us dot army dot mil
-------------------------------
If you wish to be a success in the world, promise everything, deliver 
nothing. - Napoleon Bonaparte
Classification:  UNCLASSIFIED
Caveats: NONE



---------------------------------------------------------------------
-
--- This SF.Net email is sponsored by the Moblin Your Move 
Developer's challenge Build the coolest Linux based applications with 
Moblin SDK & win great prizes Grand prize is a trip for two to an 
Open Source event anywhere in the world 
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Classification:  UNCLASSIFIED
Caveats: NONE



----------------------------------------------------------------------
--- This SF.Net email is sponsored by the Moblin Your Move Developer's 
challenge Build the coolest Linux based applications with Moblin SDK & 
win great prizes Grand prize is a trip for two to an Open Source event 
anywhere in the world 
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Classification:  UNCLASSIFIED 
Caveats: NONE



-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: