Link to home
Start Free TrialLog in
Avatar of palserv
palserv

asked on

Snort installation problem with CentOS 4.6

Hello,

When i try to install Snort in my box CentOS 4.6, i got this error :

error: Failed dependencies:
        libpcap.so.0.9.4 is needed by snort-2.8.0.1-1.i386
        rtld(GNU_HASH) is needed by snort-2.8.0.1-1.i386
        libmysqlclient.so.15 is needed by snort-mysql-2.8.0.1-1.i386
        libmysqlclient.so.15(libmysqlclient_15) is needed by snort-mysql-2.8.0.1-1.i386
        libpcap.so.0.9.4 is needed by snort-mysql-2.8.0.1-1.i386
        rtld(GNU_HASH) is needed by snort-mysql-2.8.0.1-1.i386

Whats this problem?

Regards
Avatar of giltjr
giltjr
Flag of United States of America image

You need to install the products listed.  I would suggest using yum to install Snort.  It should fetch all the software needed to install Snort.

Either su'ed as root or using the sudo command:

     yum install snort

and reply y to download and install or use:

     yum -y install snort

to have it automatically download and install.
Avatar of palserv
palserv

ASKER

I already do it and i got nothing

Setting up Install Process
Setting up repositories
update                    100% |=========================|  951 B    00:00    
base                      100% |=========================| 1.1 kB    00:00    
addons                    100% |=========================|  951 B    00:00    
extras                    100% |=========================| 1.1 kB    00:00    
Reading repository metadata in from local files
Excluding Packages in global exclude list
Finished
Parsing package install arguments
No Match for argument: snort
Nothing to do
yum install mysql libpcap glibc
Avatar of palserv

ASKER

Nothing happened , i already have Cpanel installed

[root@yafa ]# yum install libpcap glibc
Setting up Install Process
Setting up repositories
update                    100% |=========================|  951 B    00:00     
base                      100% |=========================| 1.1 kB    00:00     
addons                    100% |=========================|  951 B    00:00     
extras                    100% |=========================| 1.1 kB    00:00     
Reading repository metadata in from local files
Excluding Packages in global exclude list
Finished
Parsing package install arguments
Nothing to do
[root@yafa ]# 

Open in new window

Avatar of palserv

ASKER

Nothing happened , i already have Cpanel installed

[root@yafa ]# yum install libpcap glibc
Setting up Install Process
Setting up repositories
update                    100% |=========================|  951 B    00:00     
base                      100% |=========================| 1.1 kB    00:00     
addons                    100% |=========================|  951 B    00:00     
extras                    100% |=========================| 1.1 kB    00:00     
Reading repository metadata in from local files
Excluding Packages in global exclude list
Finished
Parsing package install arguments
Nothing to do
[root@yafa ]# 

Open in new window

Avatar of palserv

ASKER

Nothing happened , i already have Cpanel installed

[root@yafa ]# yum install libpcap glibc
Setting up Install Process
Setting up repositories
update                    100% |=========================|  951 B    00:00     
base                      100% |=========================| 1.1 kB    00:00     
addons                    100% |=========================|  951 B    00:00     
extras                    100% |=========================| 1.1 kB    00:00     
Reading repository metadata in from local files
Excluding Packages in global exclude list
Finished
Parsing package install arguments
Nothing to do
[root@yafa ]# 

Open in new window

You excluded mysql, which you need - or rather mysql-libs on rhel4.

I also just realized - I think you're trying to install an RPM build to redhat5, not 4.  The version of libpcap that it is looking for is one that comes on 5, 4 has an older version.  You should find a version build for el4, or you'll have to get libraries from other places, and that could get messy.

You could also grab the srpm for snort from their web page, but then you'll need devel libraries installed to compile it.
How about issuing the commands

rpm -qa > installed.txt
grep mysql installed.txt
grep libpcap installed.txt
grep glibc installed.txt
grep snort installed.txt
rm installed.txt

This will show you if you have any of these already installed.  It appears that either you already have some of these installed or the yum repositories you are using do not have any of these.
From the output of his posted yum command base and updates were enabled, so those should definitely have the required libraries - just not the right versions.  Should be the right mysql libs, but not libpcap.  Could either grab a newer libpcap rpm, compile libpcap from source and force the rpm, or get a version of a snort rpm build for rhel4.
I would have assumed that too.  However, why did nothing happen when he attempting to install snort using yum.

I guess it it is possible that what ever repositories he is using does not have snort on it, or he has the most recent level already installed.
Snort isn't in any of the centos repositories, either for 4 or 5.  But he should be able to pull in the dependencies from the repo, as long as the rpm is built for the right version that he's running.
ASKER CERTIFIED SOLUTION
Avatar of arrkerr1024
arrkerr1024
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial