[prev in list] [next in list] [prev in thread] [next in thread]
List: snort-devel
Subject: [Snort-devel] Snort 1.8 RPMs & RH7.1 - I had trouble with it.
From: "Austin Mann" <austin () mann-made ! com>
Date: 2001-07-24 1:49:47
[Download RAW message or body]
Kind Snorter folks -
On the Snort.org site, feedback on the RPM's was solicited, so here goes.
I used to run RH6.2 now run RH7.1, and there were some structural changes, that I \
think I may be able to attribute my problems to. (inetd is gone. alas)
Anyway I grabbed the Snort-1.8p1-0.i386.rpm and when I try to run it, it fusses about \
libpcap being >= 4.0. So I went to tcpdump.org got their tarballs for libpcap, & \
tcpdump (while I was at it) did the -xvzf, ./configure, make, make install, (for both \
libpcap & tcpdump) and now tcpdump runs fine. In fact it says its using a 6.x version \
of libpcap.
Anyway I went back to rerun the rpm -i -v Snort*
and it still complains.
Is it because my paths are so different now?
My old tcpdump was in /usr/sbin
now it is in /usr/local/sbin/
I was thinking my libpcap may be somewhere in la-la land as well
A find / libpcap was fruitless however.
Any thoughts are deeply appreciatted, and if I can help with something (I'm a \
router-network-MCSE geek, not a coder) please let me know...
I want to thank you folks for taking the time to write an open source NIDS and make \
it available to the world. Linux is so cool, I just cant get enthused about reupping \
my MCSE, now that I've seen this OS, and the apps for it, and the quality of the open \
source projects I run. Many thanks, and my profound respect.
Warmest wishes,
Austin Mann
[Attachment #3 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.2014.210" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Kind Snorter folks -</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>On the Snort.org site, feedback on the RPM's was
solicited, so here goes.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I used to run RH6.2 now run RH7.1, and there were
some structural changes, that I think I may be able to attribute my problems
to.</FONT></DIV>
<DIV><FONT face=Arial size=2>(inetd is gone. alas)</FONT></DIV>
<DIV><FONT face=Arial size=2>Anyway I grabbed the Snort-1.8p1-0.i386.rpm and
when I try to run it, it fusses about libpcap being >= 4.0.</FONT></DIV>
<DIV><FONT face=Arial size=2>So I went to tcpdump.org got their tarballs for
libpcap, & tcpdump (while I was at it)</FONT></DIV>
<DIV><FONT face=Arial size=2>did the -xvzf, ./configure, make, make install,
(for both libpcap & tcpdump) and now tcpdump runs fine.</FONT></DIV>
<DIV><FONT face=Arial size=2>In fact it says its using a 6.x version of
libpcap.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Anyway I went back to rerun the rpm -i -v
Snort*</FONT></DIV>
<DIV><FONT face=Arial size=2>and it still complains.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Is it because my paths are so different
now?</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>My old tcpdump was in /usr/sbin </FONT></DIV>
<DIV><FONT face=Arial size=2>now it is in /usr/local/sbin/</FONT></DIV>
<DIV><FONT face=Arial size=2>I was thinking my libpcap may be somewhere in la-la
land as well</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>A find / libpcap was fruitless
however.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Any thoughts are deeply appreciatted, and if I can
help with something (I'm a router-network-MCSE geek, not a coder) please let me
know...</FONT></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I want to thank you folks for taking the time to
write an open source NIDS and make it available to the world. Linux is so cool,
I just cant get enthused about reupping my MCSE, now that I've seen this OS, and
the apps for it, and the quality of the open source projects I run. Many thanks,
and my profound respect.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Warmest wishes, </FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Austin Mann</FONT></DIV></BODY></HTML>
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
http://lists.sourceforge.net/lists/listinfo/snort-devel
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic