RE: Can't get snortsnarf to work
"Mike Koponick" <[email protected]> Tue, 1 Apr 2003 16:51:28 -0800
| Newsgroups | gmane.comp.security.ids.snort.snarf |
|---|---|
| Message-ID | <[email protected]> |
It looks like you need to download some modules from CPAN (search.cpan.org)=20 Here is the link: http://search.cpan.org/author/MUIR/Time-modules-2003.0211/ for the obvious missing.. err.. link. Mike Mike Koponick RedHawk. - Network Engineering ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify [email protected]. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----Original Message----- From: Don&Brigitte [mailto:[email protected]]=20 Sent: Tuesday, April 01, 2003 1:27 PM To: [email protected] Subject: [Snortsnarf] Can't get snortsnarf to work Sorry for this email I am sure you have gotten a ton of them. However I=20 am unable to get snortsnarf to work. My command line usage is a follows monkeylabs:/home/don/SnortSnarf-021111.1 # ./snortsnarf.pl -gmt=20 /home/don/OOS_Report_2003_03_26_15824.txt=20 /home/don/OOS_Report_2003_03_27_23034.txt This results in the following error Can't locate Time/ParseDate.pm in @INC (@INC contains: ./include=20 /usr/lib/perl5/5.6.1/i586-linux /usr/lib/perl5/5.6.1=20 /usr/lib/perl5/site_perl/5.6.1/i586-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/site_perl . ./include/SnortSnarf) at=20 include/SnortSnarf/TimeFilters.pm line 18. BEGIN failed--compilation aborted at include/SnortSnarf/TimeFilters.pm=20 line 18. Compilation failed in require at include/SnortSnarf/Filter.pm line 19. BEGIN failed--compilation aborted at include/SnortSnarf/Filter.pm line 19. Compilation failed in require at ./snortsnarf.pl line 87. BEGIN failed--compilation aborted at ./snortsnarf.pl line 87. I have looked in the Time directory and noted nothing there. Could you=20 please tell me if I am invoking this correctly? I basically am trying to recreate the same type of output as evidenced on the home page example. Thanks for your time. Cheers! Don _______________________________________________ SnortSnarf-users mailing list [email protected] http://www.silicondefense.com/mailman/listinfo/snortsnarf-users