Very Computer

by jp » Wed, 25 Jul 2001 23:16:47

hi all, you may have seen a couple of my other posts, i think they were in
this newsgroup. Well, i got rooted and decided to reinstall on my P-90 :-)
RH 7.1 Seawolf my hd is partitioned as so:

/boot 50 megs
/root 1000
/home 300
/var 300
/usr/local 200
/jail (for bind 9.xxx when i install it)
/usr 1300

i have a fresh install and since i got rooted last time, i have done some
research and decided that my first step after installation (before i plug
ANY kind of modem or another computer into it lol) was to install snort and
some kind of system log watcher, i saw one mentioned here in a reply to a
messaage i posted before i think it was syslogwatch or something. But
anyways, i made sure to install libpcap-0.4 and 0.6. Both were installeed
from source with no errors. I did both because i installed 0.4 first (thats
the one that is linked from the snort.org dl page). Once i installed that I
attempted to install snort 1.8 from snort-1.8p1-0.src.rpm. i did:

rpm --rebuild snort-1.8p1-0.src.rpm
the err msg i got was:
Installing snort-1.8p1-0.src.rpm
error: failed build dependancies:
libpcap >= 0.4 is needed by snort-1.8p1-0

It looks like snort isnt finding libpcap, when i made libpcap i went with
the STOCK defaults, i didnt change anything in Makfile. hmm now that i think
about it maybe thats the prob lol. Well i read the makefiles. etc but i am
still at a loss. Can someone point me in the right direction pleez?

jp

by jp » Wed, 25 Jul 2001 23:17:49

hi all, you may have seen a couple of my other posts, i think they were in
this newsgroup. Well, i got rooted and decided to reinstall on my P-90 :-)
RH 7.1 Seawolf my hd is partitioned as so:

/boot 50 megs
/root 1000
/home 300
/var 300
/usr/local 200
/jail (for bind 9.xxx when i install it)
/usr 1300

i have a fresh install and since i got rooted last time, i have done some
research and decided that my first step after installation (before i plug
ANY kind of modem or another computer into it lol) was to install snort and
some kind of system log watcher, i saw one mentioned here in a reply to a
messaage i posted before i think it was syslogwatch or something. But
anyways, i made sure to install libpcap-0.4 and 0.6. Both were installeed
from source with no errors. I did both because i installed 0.4 first (thats
the one that is linked from the snort.org dl page). Once i installed that I
attempted to install snort 1.8 from snort-1.8p1-0.src.rpm. i did:

rpm --rebuild snort-1.8p1-0.src.rpm
the err msg i got was:
Installing snort-1.8p1-0.src.rpm
error: failed build dependancies:
libpcap >= 0.4 is needed by snort-1.8p1-0

It looks like snort isnt finding libpcap, when i made libpcap i went with
the STOCK defaults, i didnt change anything in Makfile. hmm now that i think
about it maybe thats the prob lol. Well i read the makefiles. etc but i am
still at a loss. Can someone point me in the right direction pleez?

jp

by **Christopher William Palo** » Thu, 26 Jul 2001 00:43:37

if you compiled libpcap then rpm has no way of knowing that and as such
things you don't have it... Just install the libpcap rpm instead and
you're all good.

Chris Palow

> hi all, you may have seen a couple of my other posts, i think they were in
> this newsgroup. Well, i got rooted and decided to reinstall on my P-90 :-)
> RH 7.1 Seawolf my hd is partitioned as so:

> /boot 50 megs
> /root 1000
> /home 300
> /var 300
> /usr/local 200
> /jail (for bind 9.xxx when i install it)
> /usr 1300

> i have a fresh install and since i got rooted last time, i have done some
> research and decided that my first step after installation (before i plug
> ANY kind of modem or another computer into it lol) was to install snort and
> some kind of system log watcher, i saw one mentioned here in a reply to a
> messaage i posted before i think it was syslogwatch or something. But
> anyways, i made sure to install libpcap-0.4 and 0.6. Both were installeed
> from source with no errors. I did both because i installed 0.4 first (thats
> the one that is linked from the snort.org dl page). Once i installed that I
> attempted to install snort 1.8 from snort-1.8p1-0.src.rpm. i did:

> rpm --rebuild snort-1.8p1-0.src.rpm
> the err msg i got was:
> Installing snort-1.8p1-0.src.rpm
> error: failed build dependancies:
> libpcap >= 0.4 is needed by snort-1.8p1-0

> It looks like snort isnt finding libpcap, when i made libpcap i went with
> the STOCK defaults, i didnt change anything in Makfile. hmm now that i think
> about it maybe thats the prob lol. Well i read the makefiles. etc but i am
> still at a loss. Can someone point me in the right direction pleez?

> jp

by **John P Whit** » Thu, 26 Jul 2001 01:48:04

since i installed libpcap 0.4 and 0.6 from source, i have an rpm now,
libpcap-0.4.13.i386.rpm, from Doors 2.1 (dont know them). I am going to try
to install that, but first i am wondering, should i uninstall libpcap 0.4? I
went in the src dir and did make uninstall for 0.6, so thats fine. but what
do i do for libpcap 0.4? I tried to do make uninstall but there must not be
an uninstall script in there. what should i do? is this going to affect the
rpm when i try to install it?

jp

> if you compiled libpcap then rpm has no way of knowing that and as such
> things you don't have it... Just install the libpcap rpm instead and
> you're all good.

> Chris Palow

> > hi all, you may have seen a couple of my other posts, i think they were
in
> > this newsgroup. Well, i got rooted and decided to reinstall on my P-90
:-)
> > RH 7.1 Seawolf my hd is partitioned as so:

> > /boot 50 megs
> > /root 1000
> > /home 300
> > /var 300
> > /usr/local 200
> > /jail (for bind 9.xxx when i install it)
> > /usr 1300

> > i have a fresh install and since i got rooted last time, i have done
some
> > research and decided that my first step after installation (before i
plug
> > ANY kind of modem or another computer into it lol) was to install snort
and
> > some kind of system log watcher, i saw one mentioned here in a reply to
a
> > messaage i posted before i think it was syslogwatch or something. But
> > anyways, i made sure to install libpcap-0.4 and 0.6. Both were
installeed
> > from source with no errors. I did both because i installed 0.4 first
(thats
> > the one that is linked from the snort.org dl page). Once i installed
that I
> > attempted to install snort 1.8 from snort-1.8p1-0.src.rpm. i did:

> > rpm --rebuild snort-1.8p1-0.src.rpm
> > the err msg i got was:
> > Installing snort-1.8p1-0.src.rpm
> > error: failed build dependancies:
> > libpcap >= 0.4 is needed by snort-1.8p1-0

> > It looks like snort isnt finding libpcap, when i made libpcap i went
with
> > the STOCK defaults, i didnt change anything in Makfile. hmm now that i
think
> > about it maybe thats the prob lol. Well i read the makefiles. etc but i
am
> > still at a loss. Can someone point me in the right direction pleez?

> > jp

Very Computer

installing snort on a FRESH install of RH 7.1 Seawolf

installing snort on a FRESH install of RH 7.1 Seawolf

installing snort on a FRESH install of RH 7.1 Seawolf

installing snort on a FRESH install of RH 7.1 Seawolf

installing snort on a FRESH install of RH 7.1 Seawolf