Snort not starting on version 2.0 freebsd 8.0 11/10/09 (clean install)
-
when I try to start snort this is all that shows in the system log
Oct 31 04:48:27 SnortStartup[18444]: Ram free BEFORE starting Snort: 1785M – Ram free AFTER starting Snort: 1785M -- Mode ac-bnfa -- Snort memory usage:
-
this is what I get when trying to start snort from console looks like its a missing lib problem
/libexec/ld-elf.so.1: Shared object "libpcap.so.5" not found, required by "snort
-
anyone have any ideas to help
-
anyone?
-
grandrivers
Are you using the latest package ?
Did you try updating the pfsense version ?
James
-
-
I am using latest snapshot and the latest snort package and still looks like a missing lib
snort
/libexec/ld-elf.so.1: Shared object "libpcap.so.5" not found, required by "snort" "
Sorry your questions but I been really busy at work.
That error may be because snort needs to be compiled with for freebsd 8.0.
Please post these commands.
pkg_info
and
find / | grep libpcap.so
James
-
pkg_info
libdnet-1.11_3 A simple interface to low level networking routines
mysql-client-5.1.34 Multithreaded SQL database (client)
pcre-7.9 Perl Compatible Regular Expressions library
perl-5.8.9_3 Practical Extraction and Report Language
snort-2.8.4.1_1 Lightweight network intrusion detection systemfind / | grep libpcap.so
/lib/libpcap.so.7
/usr/local/lib/libpcap.so.3
/usr/local/lib/libpcap.so
/usr/lib/libpcap.so -
grand
It seems 8.0 has updated the libpcap libs. So snort binary will have to be built for 8.0.
A quick fix is to soft link so.7 with so.5.
ln /lib/libpcap.so.7 /lib/libpcap.so.5
James
-
thank you very much I had reversed the order of the libs in the command