Re: snort-2.0.0 fails to start

["Roy S. Rapoport" <snort-users () ols inorganic org>]

On Tue, Jun 17, 2003 at 02:39:37PM -0500, Rick Waegner wrote:
> database: compiled support for ( )
> database: configured to use mysql
> database: 'mysql' support is not compiled into this build of snort
[...]
> the mysql database is present, the contrib/create_mysql was run and the
> tables are present, i ran './configure --with-mysql' 'make' 'make install'.
>
> Are there known issues with snort-2.0.0 and mysql support??

Yes.  Snort 2.0.0 refuses to log to MySQL databases unless MySQL support
is ACTUALLY compiled into it; it's a known issue.

The solution is to make sure that MySQL support really is compiled into
Snort.  Find the snort binary and run 'ldd' on it.  The output should
look *something* like this:
---
1 nag /usr/local/snort/bin # ldd snort
        libz.so.1 =>     /usr/lib/libz.so.1
        libm.so.1 =>     /usr/lib/libm.so.1
        libsocket.so.1 =>        /usr/lib/libsocket.so.1
        libnsl.so.1 =>   /usr/lib/libnsl.so.1
        libmysqlclient.so.12 => /usr/local/mysql/lib/mysql/libmysqlclient.so.12
        libc.so.1 =>     /usr/lib/libc.so.1
        libdl.so.1 =>    /etc/lib/libdl.so.1
        libmp.so.2 =>    /usr/lib/libmp.so.2
        libcrypt_i.so.1 =>       /usr/lib/libcrypt_i.so.1
        libgen.so.1 =>   /usr/lib/libgen.so.1
        /usr/platform/SUNW,Ultra-2/lib/libc_psr.so.1
---

Notice the link to the libmysqlclient.so.12 there.

Configuring snort with --with-mysql is a good start, but the config file
may not find where the libraries are; you may wish to try
--with-mysql=<install directory of mysql>, eg "--with-mysql=/usr/local/mysql"


-roy


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users