pfSense Support Subscription

Author Topic: Re: Snort missing mysql - Resolved  (Read 1743 times)

0 Members and 1 Guest are viewing this topic.

Offline Cino

  • Hero Member
  • *****
  • Posts: 1051
  • Karma: +0/-0
    • View Profile
Re: Snort missing mysql - Resolved
« on: June 24, 2012, 06:14:11 am »
new snort build snort-2.9.2.3-i386.pbi 2012-Jun-23 18:19:29 wasn't compiled with mysql support

Code: [Select]
Jun 24 07:15:34 SnortStartup[23880]: Interface Rule START for 0_39737_em3...
Jun 24 07:15:34 barnyard2[6930]: FATAL ERROR: If this build of snort was obtained as a binary distribution (e.g., rpm, or Windows), then check for alternate builds that contains the necessary 'mysql' support. If this build of snort was compiled by you, then re-run the the ./configure script using the '--with-mysql' switch. For non-standard installations of a database, the '--with-mysql=DIR' syntax may need to be used to specify the base directory of the DB install. See the database documentation for cursory details (doc/README.database). and the URL to the most recent database plugin documentation.
Jun 24 07:15:34 barnyard2[6930]: FATAL ERROR: If this build of snort was obtained as a binary distribution (e.g., rpm, or Windows), then check for alternate builds that contains the necessary 'mysql' support. If this build of snort was compiled by you, then re-run the the ./configure script using the '--with-mysql' switch. For non-standard installations of a database, the '--with-mysql=DIR' syntax may need to be used to specify the base directory of the DB install. See the database documentation for cursory details (doc/README.database). and the URL to the most recent database plugin documentation.
Jun 24 07:15:34 barnyard2[6930]: database: 'mysql' support is not compiled into this build of snort
Jun 24 07:15:34 barnyard2[6930]: database: 'mysql' support is not compiled into this build of snort
« Last Edit: June 25, 2012, 05:25:09 am by Cino »

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14990
  • Karma: +4/-0
    • View Profile
Snort missing mysql
« Reply #1 on: June 24, 2012, 09:44:17 am »
new snort build snort-2.9.2.3-i386.pbi 2012-Jun-23 18:19:29 wasn't compiled with mysql support

Code: [Select]
Jun 24 07:15:34 SnortStartup[23880]: Interface Rule START for 0_39737_em3...
Jun 24 07:15:34 barnyard2[6930]: FATAL ERROR: If this build of snort was obtained as a binary distribution (e.g., rpm, or Windows), then check for alternate builds that contains the necessary 'mysql' support. If this build of snort was compiled by you, then re-run the the ./configure script using the '--with-mysql' switch. For non-standard installations of a database, the '--with-mysql=DIR' syntax may need to be used to specify the base directory of the DB install. See the database documentation for cursory details (doc/README.database). and the URL to the most recent database plugin documentation.
Jun 24 07:15:34 barnyard2[6930]: FATAL ERROR: If this build of snort was obtained as a binary distribution (e.g., rpm, or Windows), then check for alternate builds that contains the necessary 'mysql' support. If this build of snort was compiled by you, then re-run the the ./configure script using the '--with-mysql' switch. For non-standard installations of a database, the '--with-mysql=DIR' syntax may need to be used to specify the base directory of the DB install. See the database documentation for cursory details (doc/README.database). and the URL to the most recent database plugin documentation.
Jun 24 07:15:34 barnyard2[6930]: database: 'mysql' support is not compiled into this build of snort
Jun 24 07:15:34 barnyard2[6930]: database: 'mysql' support is not compiled into this build of snort

Not sure why but snort's build options were (And had always been) set to use WITHOUT_MYSQL. I changed that to WITH_MYSQL and a new build is running now. Will post again when it's up.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14990
  • Karma: +4/-0
    • View Profile
Re: Snort missing mysql
« Reply #2 on: June 24, 2012, 01:14:47 pm »
New snort build is up that should have it built in. Give it another go.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline Cino

  • Hero Member
  • *****
  • Posts: 1051
  • Karma: +0/-0
    • View Profile
Re: Snort missing mysql
« Reply #3 on: June 24, 2012, 02:39:55 pm »
same issue.. I'll try again after the next build

timestamp reminder: snort-2.9.2.3-i386.pbi   2012-Jun-24 17:56:39

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14990
  • Karma: +4/-0
    • View Profile
Re: Snort missing mysql
« Reply #4 on: June 24, 2012, 02:44:49 pm »
Did you uninstall and reinstall, or just click the 'pkg' button?

The latter doesn't remove the binaries and pull new ones, iirc.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14990
  • Karma: +4/-0
    • View Profile
Re: Snort missing mysql
« Reply #5 on: June 24, 2012, 02:56:56 pm »
Also, gitsync and try it once more, I noticed that some libs were going into subdirectories and weren't getting included how I thought they were.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline Cino

  • Hero Member
  • *****
  • Posts: 1051
  • Karma: +0/-0
    • View Profile
Re: Snort missing mysql
« Reply #6 on: June 24, 2012, 04:26:18 pm »
having the same issue. Could it be that i'm using snort-dev and this change wasn't made to it? https://github.com/bsdperimeter/pfsense-packages/commit/81757da76ce52b9dd02ddccc5c7ba73100a6e6d0

they are using the same pbi file, so I thinking the same change should be made to snort-dev. Only difference right now is the xml code that i can tell from the 2 packages

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14990
  • Karma: +4/-0
    • View Profile
Re: Snort missing mysql
« Reply #7 on: June 24, 2012, 07:21:22 pm »
Commit is inbound for that on snort-dev, I didn't touch snort dev initially.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline rcfa

  • Sr. Member
  • ****
  • Posts: 565
  • Karma: +0/-0
    • View Profile
Re: Snort missing mysql
« Reply #8 on: June 25, 2012, 05:18:26 am »
What's the difference between these two packages anyway? They seem to use the same version of everything.

And if I run the -dev package, will the configuration be forward/backwards compatible, or how does this work when at some point the two are merged or one replaces the other?

Offline Cino

  • Hero Member
  • *****
  • Posts: 1051
  • Karma: +0/-0
    • View Profile
Re: Snort missing mysql - Resolved
« Reply #9 on: June 25, 2012, 05:22:52 am »
Commit is inbound for that on snort-dev, I didn't touch snort dev initially.

Thank you Jim! It fired right up after rule update