[libidmef-users] Re: snort-1.8.6 configure error with idmef xml pluggin

[Joe M. <jo...@Si...>]

Hello,

First thing, you need to use libidmef-0.6.3 with the current IDMEF
plugin for Snort.  An enhanced version of the plugin is being developed
for use with the most recent version of libidmef (0.7.1).  Make sure you
remove the 0.7.1 libraries manually before you install 0.6.3 as "make
install" will not overwrite more recent versions of the library.

If you have any more problems, feel free to let us know!

Thanks,

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions

he...@gs... wrote:
> 
> hello,
> I am attempting to install snort-1.8.6 with the XML output plugin on an x86 Redhat 7.0 machine.I installed ntp4.1.1a, libxml2-2.4.22-1 and libxml2-devel-2.4.22-1 via rpm and libidmef-0.7.1. All seemed to go well.
> 
> When I run: ./configure --enable-idmef --with-libntp-libraries=/home/hem/ntp-4.1.1a/libntp
> 
> The following is returned:
> ---skip---
> checking for gzopen in -lz... yes
> checking for /usr/local/include/libxml/tree.h... yes
> checking for xmlNewNode in -lxml2... yes
> checking for ntp source directory (includes and libraries)... yes
> checking for /usr/local/include/libidmef/idmefxml.h... yes
> checking for newIDMEF_Message in -lidmef... no
> configure: error: libidmef library (idmef) not found in /usr/local/lib
> 
> The contents of the /usr/local/lib directory are as follows:
> libidmef.a  libidmef.so  libidmef.so.0.7.1  libidmef.la lbidmef.so.0  libpcap.a
> 
> Can you give me some suggestion? Thanks!