RE: How to upgrade from Snort 1.9.1 to 2.0.1 Please ....

["Slighter, Tim" <tslighter () itc nrcs usda gov>]

my 1 rubles worth to do this the easiest way....  just rename your current
snort directory to say oldsnort (mv /usr/local/snort /usr/local/oldsnort)
and then build the recent snort-2.0.1 as /usr/local/snort and do your
./configure - make - make install and then after backing up all of your new
rules files and snort.conf, use the old files from your original snort build
as required to get things running.
-----Original Message-----
From: Snortty [mailto:cwcwcwg () yahoo com]
Sent: Wednesday, September 17, 2003 11:53 AM
To: Erek Adams; Snort-users () lists sourceforge net
Subject: Re: [Snort-users] How to upgrade from Snort 1.9.1 to 2.0.1
Please....


Erek, 

Thanks for the prompt reply. 
Still, not so sure yet about the upgrading steps.

I tried (without touching existing working snort
1.9.0)

# gzip -d -c snort-2.0.1.tar.gz |tar xvf -
# cd snort-2.0.1
#./configure
#make
error reported:
r cru libspo.a spo_alert_fast.o spo_alert_full.o
spo_alert_smb.o spo_alert_syslog.o
spo_alert_unixsock.o spo_csv.o spo_database.o
spo_log_null.o spo_log_tcpdump.o spo_unified.o
spo_log_ascii.o spo_alert_sf_socket.o 
make[3]: ar: Command not found
make[3]: *** [libspo.a] Error 127
make[3]: Leaving directory
`/root/snortfile/snort-2.0.1/src/output-plugins'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory
`/root/snortfile/snort-2.0.1/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory
`/root/snortfile/snort-2.0.1'
make: *** [all] Error 2

then.
#make install

Then, 
#snort -V 
still shows Snort Version 1.9.0 is running...

Do I need to remove/uninstall the existing 1.9.0
before install
2.0.1? and HOW to uninstall snort if needed in the
right way?

Thanks a lot in advance. 
Snotty W. 

--- Erek Adams <erek () snort org> wrote:
> On Tue, 16 Sep 2003, Snortty wrote:
>
> > I'm running snort 1.9.1 on Solaris 8, it works
> fine,
> > just reporting lots of errors when run it after
> > downloading new rules.
> >
> > I plan to upgrade it to Snort 2.0.1, but want to
> make
> > sure before going ahead - better having the old
> snort
> > working than a newer one which is not.
> >
> > Do I have to remove snort 1.9.1 first and how to
> do it
> > the right way? or just install the new one on top
> of
> > the old one.
> >
> > I did which snort, it reports:
> > # which snort
> > /usr/local/bin/snort
> > #
> >
> > I'm very new in this, so please advise.
>
> Long story made short:  1.9.x is dead--No longer
> maintained.
>
> Longer version:  The new rules are 2.x style.  They
> won't work with 1.9.x.
> The upgrade is seamless.  Replace the executeable,
> snort.conf, *.rules,
> *.map, *.config and you're ready to go.
>
> If you need more info, drop me a line.
>
> Cheers!
>
> -----
> Erek Adams
>
>    "When things get weird, the weird turn pro."  
> H.S. Thompson
-------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users