snort mit mysql support

[tarsidae]

hallo zusammen!!!

hoffe ich starte meinen ersten Beitrag in der richtigen Kategorie :rolleyes:

Ich habe seit gut 3 Tagen das Problem, dass ich snort mit mysql-Support starten will und immer wieder dieselbe Fehlermeldung erhalte:

database: compiled support for ( )
database: configured to use mysql
database: 'mysql' support is not compiled into this build of snort

Installiert habe ich es ordnungsgemäß wie folgt:

./configure --with-mysql=/usr/local/mysql
make
make install

Bei der Kompilierung scheint alles in Ordnung; Meldung: checking for mysql ... yes
Die Meldung "'mysql' support is not compiled into this build of snort" scheint mir verdächtig. Ich habe Unbuntu laufen und kann deshalb keine RPM installieren (ist doch richtig, oder? Bin linux-neuling ;)). Ich erwähne das, weil man unter http://www.snort.org/dl/ ein tar.gz-Paket bekommt ohne hinweis auf mysql-Unterstützung. Unter http://www.snort.org/dl/binaries/linux/ findet man jedoch diesen Hinweis: "snort-mysql-2.6.0-1.FC4.i386.rpm"

Was sagt ihr dazu? :confused:

Ich habe bereits ausprobiert: snort-2.4.5, snort-2.4.3, snort-2.6.0
DBMS: Mysql-Standard-5.0.22

Mittlerweile bin ich bei der 5 oder 6 Neuinstallation (verz. gelöscht und neu kompiliert) und weiss nicht mehr weiter. :(

Bitte, Bitte helft mir! :(

[MiGo]

POste doch einfach mal die Ausgabe von "./configure --with-mysql=/usr/local/mysql" (Code-Tags!) und die Ausgabe von "ls /usr/local/mysql -lh".

[tarsidae]

root@PIV:/# ls /usr/local/mysql -lh
lrwxrwxrwx 1 root root 43 2006-06-23 23:59 /usr/local/mysql -> /usr/local/mysql-standard-5.0.22-linux-i686



root@PIV:/opt/snort-2.4.5# ./configure --with-mysql=/usr/local/mysql

checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for gawk... no
checking for mawk... mawk
checking whether make sets $(MAKE)... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking for style of include used by make... GNU
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking dependency style of gcc... gcc3
checking for ranlib... ranlib
checking for gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ANSI C... (cached) none needed
checking dependency style of gcc... (cached) gcc3
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking whether byte ordering is bigendian... no
checking for sparc alignment... no
checking how to run the C preprocessor... gcc -E
checking for egrep... grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for strings.h... (cached) yes
checking for string.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for unistd.h... (cached) yes
checking sys/sockio.h usability... no
checking sys/sockio.h presence... no
checking for sys/sockio.h... no
checking paths.h usability... yes
checking paths.h presence... yes
checking for paths.h... yes
checking for inet_ntoa in -lnsl... yes
checking for socket in -lsocket... no
checking whether printf must be declared... no
checking whether fprintf must be declared... no
checking whether syslog must be declared... no
checking whether puts must be declared... no
checking whether fputs must be declared... no
checking whether fputc must be declared... no
checking whether fopen must be declared... no
checking whether fclose must be declared... no
checking whether fwrite must be declared... no
checking whether fflush must be declared... no
checking whether getopt must be declared... no
checking whether bzero must be declared... no
checking whether bcopy must be declared... no
checking whether memset must be declared... no
checking whether strtol must be declared... no
checking whether strcasecmp must be declared... no
checking whether strncasecmp must be declared... no
checking whether strerror must be declared... no
checking whether perror must be declared... no
checking whether socket must be declared... no
checking whether sendto must be declared... no
checking whether vsnprintf must be declared... no
checking whether snprintf must be declared... no
checking whether strtoul must be declared... no
checking for snprintf... yes
checking for strlcpy... no
checking for strlcat... no
checking for strerror... yes
checking for __FUNCTION__... yes
checking for floor in -lm... yes
checking for pcap_datalink in -lpcap... yes
checking pcre.h usability... yes
checking pcre.h presence... yes
checking for pcre.h... yes
checking for pcre_compile in -lpcre... yes
checking for mysql... yes
checking for compress in -lz... yes
checking for u_int8_t... yes
checking for u_int16_t... yes
checking for u_int32_t... yes
checking for a BSD-compatible install... /usr/bin/install -c
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating src/sfutil/Makefile
config.status: creating src/detection-plugins/Makefile
config.status: creating src/output-plugins/Makefile
config.status: creating src/preprocessors/Makefile
config.status: creating src/preprocessors/HttpInspect/Makefile
config.status: creating src/preprocessors/HttpInspect/include/Makefile
config.status: creating src/preprocessors/HttpInspect/utils/Makefile
config.status: creating src/preprocessors/HttpInspect/anomaly_detection/Makefileconfig.status: creating src/preprocessors/HttpInspect/client/Makefile
config.status: creating src/preprocessors/HttpInspect/event_output/Makefile
config.status: creating src/preprocessors/HttpInspect/mode_inspection/Makefile
config.status: creating src/preprocessors/HttpInspect/normalization/Makefile
config.status: creating src/preprocessors/HttpInspect/server/Makefile
config.status: creating src/preprocessors/HttpInspect/session_inspection/Makefile
config.status: creating src/preprocessors/HttpInspect/user_interface/Makefile
config.status: creating src/preprocessors/flow/Makefile
config.status: creating src/preprocessors/flow/int-snort/Makefile
config.status: creating src/preprocessors/flow/portscan/Makefile
config.status: creating src/parser/Makefile
config.status: creating doc/Makefile
config.status: creating contrib/Makefile
config.status: creating schemas/Makefile
config.status: creating rpm/Makefile
config.status: creating m4/Makefile
config.status: creating etc/Makefile
config.status: creating templates/Makefile
config.status: creating src/win32/Makefile
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing depfiles commands
root@PIV:/opt/snort-2.4.5#

[MiGo]

Hm, das sieht soweit eigentlich alles ok aus, da kann ich mit meinen extrem begrenzten snort-Kenntnissen nicht mehr viel zu sagen.

[tarsidae]

Schade, aber danke für die Mühe. Vielleicht sollte ich nochmal einen thread im snort -Forum starten, sofern es mein gebrochenes Englisch zulässt. ;)

THX