Snort mailing list archives

Re: Barnyard2 error: 'mysql' support is not compiled into this build of snort


From: James Lieu <j0liu001 () yahoo com>
Date: Mon, 26 Aug 2013 10:34:34 -0700 (PDT)

./configure --with-mysql --with-mysql-libraries=/usr/lib64/mysql/ --with-mysql-includes=/usr/include/
..................
.......................
.......................


checking for mysql... yes
checking for compress in -lz... yes
checking for mysql default client reconnect... no
checking for mysql reconnect option... yes
checking for mysql setting of reconnect option before connect bug... no
checking for linuxthreads... no
checking for a BSD-compatible install... /usr/bin/install -c
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating src/sfutil/Makefile
config.status: creating src/input-plugins/Makefile
config.status: creating src/output-plugins/Makefile
config.status: creating etc/Makefile
config.status: creating doc/Makefile
config.status: creating rpm/Makefile
config.status: creating schemas/Makefile
config.status: creating m4/Makefile
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands





________________________________
From: Y M <snort () outlook com>
To: James Lieu <j0liu001 () gmail com> 
Cc: snort-users <snort-users () lists sourceforge net> 
Sent: Monday, August 26, 2013 1:15 PM
Subject: RE: [Snort-users] Barnyard2 error: 'mysql' support is not compiled into this build of snort




What is the exact error you are getting when you run Barnyard2? From your first email, I see the following error:


ERROR database: 'mysql' support is not compiled into this build of snort


Was this error generated from Barnyard2? As it says, it is Snort and direct database support in Snort was removed 
since version 2.9.3.


What was the output of compiling Barnyard2?


Please reply back to the list and not only me as there many talented people here.


Thanks.
YM




________________________________
Date: Mon, 26 Aug 2013 10:03:59 -0700
From: j0liu001 () yahoo com
Subject: Re: [Snort-users] Barnyard2 error: 'mysql' support is not compiled into       this build of snort
To: snort () outlook com


My snort install runs fine to logs and I can start Barnyard without
the mysql call with no apparent problems but once I add the mysql
output back into my barnyard.conf file I am unable to start it





Below is my config. Thanks



config from  /etc/snort/snort.conf :
----------------------------------------------------------------------------------
# unified2 
# Recommended for most installs
output unified2: filename merged.log, limit 128, nostamp, mpls_event_types, vlan_event_types
----------------------------------------------------------------------------------


config from /etc/snort/barnyard2.conf:
----------------------------------------------------------------------------------

# database: log to a variety of databases
# ---------------------------------------
#
# Purpose: This output module provides logging ability to a variety of databases
# See doc/README.database for additional information.
#
# Examples:
output database: log, mysql, user=snort password=snort dbname=snort  host=localhost
#   output database: alert, postgresql, user=snort dbname=snort
#   output database: log, odbc, user=snort dbname=snort
#   output database: log, mssql, dbname=snort user=snort password=test
#   output database: log, oracle, dbname=snort user=snort password=test
#
---------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and 
AppDynamics. Performance Central is your source for news, insights, 
analysis and resources for efficient Application Performance Management. 
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: