OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Snort-users] 10.6 Snow Leopard Tips?

From: James Lay (jlayslave-tothe-box.net)
Date: Thu May 09 2013 - 20:31:57 CDT


Mike,

It's a semi-hassle but doable. Make sure you have Xcode installed (not sure if the SL version comes with command line tools, but if not you'll need those too). Install:

daq
libdnet
pcre

Each of the above I configured with:
./configure --prefix=/Volumes/Data/Downloads/bleh

I'd suggest installing the above with a --prefix=/opt and keep in mind that you'll need to supply those dependency locations when you configure snort. Here's what I did when I was testing:

./configure --with-daq-includes=/Volumes/Data/Downloads/bleh/include --with-daq-libraries=/Volumes/Data/Downloads/bleh/lib --prefix=/Volumes/Data/Downloads/bleh --enable-sourcefire --with-libpcre-includes=/Volumes/Data/Downloads/bleh/include --with-libpcre-libraries=/Volumes/Data/Downloads/bleh/lib --with-dnet-includes=/Volumes/Data/Downloads/bleh/include --with-dnet-libraries=/Volumes/Data/Downloads/bleh/lib

And working:

uname -a && ./snort --version
Darwin Mac 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan 6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64

   ,,_ -*> Snort! <*-
  o" )~ Version 2.9.4.6 GRE (Build 73)
   '''' By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using libpcap version 1.1.1
           Using PCRE version: 8.32 2012-11-30
           Using ZLIB version: 1.2.5

After that you'll need to configure it, but that's pretty much covered elsewhere on the Snort site.
Good luck!

James

On May 7, 2013, at 3:21 PM, Mike <soundcore2michael-amorose.com> wrote:

> Any quick Snort tips for using snort on a Snow Leopard system?
>
> Thanks,
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and
> their applications. This 200-page book is written by three acclaimed
> leaders in the field. The early access version is available now.
> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
> _______________________________________________
> Snort-users mailing list
> Snort-userslists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and
their applications. This 200-page book is written by three acclaimed
leaders in the field. The early access version is available now.
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!