Re: Answered my own question, but ...

[Joe McAlerney <joey () SiliconDefense com>]

geoffrey,

The libxml2 includes may not be in /usr/local/include.  From the IDMEF
XML plugin docs
(http://www.silicondefense.com/idwg/snort-idmef/INSTALL.idmef)

7) Run ./configure with the --enable-idmef and
--with-libntp-libraries=DIR
   options where DIR is the path to the libntp library.  You may need to
use
   --with-libidmef-includes and --with-libidmef-libraries set to the
   the appropriate directory or directories if the includes and
libraries
   are not under the default directories (/usr/local/include and 
    /usr/local/lib respectively). The same thing applies to the libxml 
   includes and libraries if they are not in the default paths 
   (/usr/local/include and /usr/lib respectively).

Kind Regards,

-Joe M.

-- 
|   Joe McAlerney     joey () silicondefense com   |
| Silicon Defense - Technical Support for Snort |
|       http://www.silicondefense.com/          |
+--                                           --+

geoffrey wrote:
> Well, dropping the --with-openssl and --with-postgres options allowed
> configure to be happy - almost. It complained about not being able to find
> tree.h. Dropping the --enable-idmef option fixed this. What I'm wondering
> is, what would provide the "tree" header file? I'm assuming it must be xml
> related. I do have libxml2 installed, but I must be missing a devel
> package that has the header file. Also, what part does openssl play
> for snort? Thanks for any clues.
>
> geoffrey
> --
> +++++++++++++++++++++++++++++++++++++++++++++++++++
> "There really isn't much value in free."
>
>         -- Doug Miller  MS group product manager
>                         for competitive strategies
> +++++++++++++++++++++++++++++++++++++++++++++++++++
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users