Paul,
Barnyard uses --enable-mysql. See this thread [0]
Bammkkkk
[0] http://www.mcabee.org/lists/snort-users/May-04/msg00142.html
On Tue, 08 Feb 2005 21:26:10 -0600, Paul Schmehl <pauls@xxxxxxxxxxxx> wrote:
> I'm trying to compile barnyard on FreeBSD 4.9 (i386). It compiles fine,
> but it doesn't include support for mysql, even though I'm compiling it as
> follows:
> ./configure --with-mysql
> (generates an error about missing mysql libraries)
> ./configure --enable-mysql
> (generates an error about missing mysql libraries)
> ./configure --with-mysql=YES
> (compiles fine)
> and
> ./configure --enable-mysql=YES
> (compiles fine)
> (I've tried all of the above)
>
> When I make, I can see the output plugin being built, although there are
> some non-fatal unsigned int errors in the op_acid_db.c file:
> Making all in output-plugins
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_decode.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_fast.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_plugbase.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_logdump.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_alert_syslog.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_log_pcap.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_acid_db.c
> op_acid_db.c: In function `InsertIPData':
> op_acid_db.c:428: warning: unsigned int format, u_long arg (arg 6)
> op_acid_db.c:428: warning: unsigned int format, u_long arg (arg 7)
> op_acid_db.c:441: warning: unsigned int format, u_long arg (arg 6)
> op_acid_db.c:441: warning: unsigned int format, u_long arg (arg 7)
> op_acid_db.c: In function `InsertTCPData':
> op_acid_db.c:497: warning: unsigned int format, u_long arg (arg 8)
> op_acid_db.c:497: warning: unsigned int format, u_long arg (arg 9)
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_alert_csv.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_sguil.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_alert_syslog2.c
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src -g -O2 -Wall -c
> op_alert_console.c
> rm -f libop.a
> ar cru libop.a op_decode.o op_fast.o op_plugbase.o op_logdump.o
> op_alert_syslog.o op_log_pcap.o op_acid_db.o op_alert_csv.o op_sguil.o
> op_alert_syslog2.o op_alert_console.o
>
> As you can see, the op_acid_db.o object file was built.
>
> Yet, when barnyard is compiled, there's only one output plugin:
> gcc -g -O2 -Wall -o barnyard barnyard.o mstring.o strlcatu.o strlcpyu.o
> util.o spool.o sid.o debug.o classification.o CommandLineArgs.o
> ConfigFile.o ProgVars.o output-plugins/libop.a input-plugins/libdp.a
>
> I have the following line in the barnyard.conf file:
> output log_acid_db: mysql, database database, server localhost, user user,
> password password, detail full
>
> When I try to start barnyard, I get the following error:
> /usr/local/etc/rc.d/barnyard.sh start
> Barnyard Version 0.2.0 (Build 32)
> WARNING /usr/local/etc/barnyard.conf(156) => Unknown output plugin
> "log_acid_db" referenced, ignoring!Fatal Error, Quitting..
> Exiting
>
> I had previously compiled barnyard successfully and have been using it for
> several months. Now I'm working on a FreeBSD port of barnyard, and it's
> failing. I have repeatedly downloaded new tarballs, so I know it's not a
> problem with the copy I have since I've changed it several times. (Deleted
> the build directories and untared several times as well.)
>
> Any suggestions would be welcomed.
>
> Paul Schmehl (pauls@xxxxxxxxxxxx)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> Barnyard-users mailing list
> Barnyard-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/barnyard-users
>
--
sguil - The Analyst Console for NSM
http://sguil.sf.net
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
|
