|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
[Snort-users] RE: Snort-users digest, Vol 1 #3871 - 5 msgs
From: Guy Witney Krocker (gwkrocker
shaw.ca)
Date: Thu Jan 01 2004 - 23:12:47 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
yes, and no joy
however I made an additional symlink to libpcre.so.0 in /usr/lib and voila!
thanks
gwk
-----Original Message-----
From: snort-users-admin
lists.sourceforge.net
[mailto:snort-users-admin
lists.sourceforge.net]On Behalf Of
snort-users-request
lists.sourceforge.net
Sent: Thursday, January 01, 2004 9:09 PM
To: snort-users
lists.sourceforge.net
Subject: Snort-users digest, Vol 1 #3871 - 5 msgs
Send Snort-users mailing list submissions to
snort-users
lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/snort-users
or, via email, send a message with subject or body 'help' to
snort-users-request
lists.sourceforge.net
You can reach the person managing the list at
snort-users-admin
lists.sourceforge.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-users digest..."
Today's Topics:
1. libpcre.so.0 error loading shared libraries (Guy Witney Krocker)
2. barnyard with postgres (Bryan Irvine)
3. libpcre.so.0 error loading shared libraries (Guy Witney Krocker)
4. RE: Win32 - multiple interfaces? (Michael Steele)
5. Re: libpcre.so.0 error loading shared libraries (George Theall)
--__--__--
Message: 1
Date: Thu, 01 Jan 2004 15:02:45 -0800
From: Guy Witney Krocker <gwkrocker
shaw.ca>
To: snort-users
lists.sourceforge.net
Subject: [Snort-users] libpcre.so.0 error loading shared libraries
snort 2.1.0 on debian with mysql
compile failed looking for pcre
installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up
error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory
it is sitting in /usr/local/lib
any ideas?
gwk
sorry if this is a dup post - searched archives.. really
--__--__--
Message: 2
From: Bryan Irvine <bryan.irvine
kingcountyjournal.com>
To: 'Snort Users List' <snort-users
lists.sourceforge.net>
Date: Thu, 01 Jan 2004 15:55:44 -0800
Subject: [Snort-users] barnyard with postgres
I've just upgraded to snort 2.1 (this thresholding thing truely is
amazing!), and now I"d like to revisit the barnyard/postgres deal.
I see the barnyard version # hasn't changed in long time, so I'm
assuming the situation is as before, where all of the postgres stuff is
there but not functional (I think someone called them "stubs").
Anyone know if BY supports postgres yet?
-Bryan
--__--__--
Message: 3
Date: Thu, 01 Jan 2004 15:45:17 -0800
From: Guy Witney Krocker <gwkrocker
shaw.ca>
To: snort-users
lists.sourceforge.net
Subject: [Snort-users] libpcre.so.0 error loading shared libraries
snort 2.1.0 on debian with mysql
compile failed looking for pcre
installed pcre 4.5
snort 2.1 then compiled and installed OK
however fails on start up
error while loading shared libraries: libpcre.so.0: cannot open shared
object file: no such file or directory
it is sitting in /usr/local/lib
any ideas?
gwk
sorry if this is a dup post - searched archives.. really
--__--__--
Message: 4
From: "Michael Steele" <michaels
winsnort.com>
To: "'Snort Users List'" <snort-users
lists.sourceforge.net>
Subject: RE: [Snort-users] Win32 - multiple interfaces?
Date: Thu, 1 Jan 2004 16:30:07 -0800
Running two Snort services may be as simple as editing the original registry
key for the first instance of Snort, and then run another instance of the
'/SERVICE /INSTALL' command to add it again, being careful not to overwrite
the first instance.
You could also use another service tool like firedeamon or the Microsoft
files you described below.
Note: BACKUP your registry so you can revert back if something gets blown
out.
Kindest regards,
The WINSNORT.com Management Team
--
Pick up your FREE Windows or UNIX Snort installation guides
mailto:support
winsnort.com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org
> -----Original Message-----
> From: snort-users-admin
lists.sourceforge.net [mailto:snort-users-
> admin
lists.sourceforge.net] On Behalf Of Rich Adamson
> Sent: Thursday, January 01, 2004 1:09 PM
> To: 'Snort Users List'; Scot Scot
> Subject: Re: [Snort-users] Win32 - multiple interfaces?
>
> Hi Scot,
>
> > > Thanks Mike..
> > >
> > > > Q1: You can't detect two interfaces with one Snort instance.
> > > >
> > > > Note: Throw some more RAM in and run 2 Snorts
> > >
> > > I'm going to set up one instance to run as a Service. Are your
> > instructions
> > > at your site now?
> > >
> > > When that's all done, looks like I'll take another run at updating
> > > the README.WIN32 stuff. Been a few changes since I wrote that original
> > > one. :)
> > >
> > > Rich
> > >
> > <snip>
> >
> > How about running both instances as a service?
> >
> > Here is a recommendation:
> >
> > Use instsrv.exe and srvany.exe from the NT Resource kit
> >
> > Step-1, execute the following commands:
> >
> > instsrv srvany %windir%\srvany.exe
> > instsrv snort1 %windir%\srvany.exe
> > instsrv snort2 %windir%\srvany.exe
> >
> > Step-2, build two .reg files for each snort instance and import them
> into
> > the registry:
> > (You will have to fill in the %%'s with your own values)
>
> Wouldn't it actually be easier to have a snort1.exe and snort2.exe and
> config both to run as a Service? (I haven't tried this, so not sure it
> would actually work.)
>
> Rich
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
> Free Linux Tutorials. Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users
lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
--__--__--
Message: 5
Date: Thu, 1 Jan 2004 22:31:47 -0500
From: George Theall <theall
tifaware.com>
To: snort-users
lists.sourceforge.net
Subject: Re: [Snort-users] libpcre.so.0 error loading shared libraries
--sm4nu43k4a2Rpi4c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Jan 01, 2004 at 03:45:17PM -0800, Guy Witney Krocker wrote:
> installed pcre 4.5
> snort 2.1 then compiled and installed OK
> however fails on start up
>=20
> error while loading shared libraries: libpcre.so.0: cannot open shared
> object file: no such file or directory
Is /usr/local/lib in /etc/ld.so.conf? Have you run ldconfig?
George
--=20
theall
tifaware.com
--sm4nu43k4a2Rpi4c
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQE/9OYjsWUciNmuHkURAoNnAJ4h2QxejJBzg8Pn0DktB6gs7ZuC8QCeNr99
VrxuN51ULbbTjn77Qt5qcho=
=736r
-----END PGP SIGNATURE-----
--sm4nu43k4a2Rpi4c--
--__--__--
_______________________________________________
Snort-users mailing list
Snort-users
lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-users
End of Snort-users Digest
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users
lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]