RE: Question about compiling 2.0.1 with SSL and SNM P

[Gary Danko <GDanko () proflowers com>]

Okay I'm an idiot. :)
The sensor that could not pick see the mysql and ssl libs just needed the
path to the mysql libs put in /etc/ld.so.conf and an /sbin/ldconfig.

Now my sensors look like this:
[root@ids1 /etc]$ ldd /usr/local/snort/bin/snort
        libz.so.1 => /usr/lib/libz.so.1 (0x40027000)
        libpcap.so.0.6.2 => /usr/lib/libpcap.so.0.6.2 (0x40035000)
        libm.so.6 => /lib/i686/libm.so.6 (0x40050000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x40073000)
        libmysqlclient.so.10 => /usr/lib/mysql/libmysqlclient.so.10
(0x40089000)
        libc.so.6 => /lib/i686/libc.so.6 (0x400be000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x401fa000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

[root@ids2 net-snmp]$ ldd /usr/local/snort/bin/snort
        libz.so.1 => /usr/lib/libz.so.1 (0x40027000)
        libpcap.so.0.6.2 => /usr/lib/libpcap.so.0.6.2 (0x40035000)
        libm.so.6 => /lib/i686/libm.so.6 (0x40050000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x40073000)
        libmysqlclient.so.10 => /usr/lib/mysql/libmysqlclient.so.10
(0x40089000)
        libc.so.6 => /lib/i686/libc.so.6 (0x400be000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x401fa000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

The question now is, how do I know if SNMP support is present? :)
Gary


-----Original Message-----
From: Ralf Spenneberg [mailto:lists () spenneberg org] 
Sent: Monday, August 04, 2003 11:18 AM
To: Gary Danko
Cc: SnortUsers
Subject: RE: [Snort-users] Question about compiling 2.0.1 with SSL and SNM P

Am Mon, 2003-08-04 um 20.08 schrieb Gary Danko:
> [root@ids2 snort-2.0.1]$ ldd /usr/local/snort/bin/snort
>         libz.so.1 => /usr/lib/libz.so.1 (0x40026000)
>         libm.so.6 => /lib/i686/libm.so.6 (0x40034000)
>         libnsl.so.1 => /lib/libnsl.so.1 (0x40057000)
>         libc.so.6 => /lib/i686/libc.so.6 (0x4006d000)
>         /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
unless you changed the building of snort to include some libraries as
static, this does not look good. 
I do not build snmp support but include mysql, openssl, etc, and my
snort looks like:
# ldd /usr/sbin/snort
        libz.so.1 => /usr/lib/libz.so.1 (0x4002e000)
        libpcap.so.0.6.2 => /usr/lib/libpcap.so.0.6.2 (0x4003c000)
        libm.so.6 => /lib/tls/libm.so.6 (0x40059000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x4007c000)
        libmysqlclient.so.10 => /usr/lib/mysql/libmysqlclient.so.10
(0x40091000)        libpq.so.3 => /usr/lib/libpq.so.3 (0x400c8000)
        libc.so.6 => /lib/tls/libc.so.6 (0x42000000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x400dd000)
        libssl.so.4 => /lib/libssl.so.4 (0x4010a000)
        libcrypto.so.4 => /lib/libcrypto.so.4 (0x40140000)
        libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x40231000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x4028f000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
        libgssapi_krb5.so.2 => /usr/kerberos/lib/libgssapi_krb5.so.2
(0x402a1000)
        libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3
(0x402b4000)
        libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3
(0x402c4000)
        libdl.so.2 => /lib/libdl.so.2 (0x402c7000)

What platform are you building on?

Cheers,

Ralf
-- 
Ralf Spenneberg
RHCE, RHCX

Book: Intrusion Detection für Linux Server   http://www.spenneberg.com
IPsec-Howto                                  http://www.ipsec-howto.org
Honeynet Project Mirror:                     http://honeynet.spenneberg.org


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users