RE: Can't get snortsnarf to work

"Mike Koponick" <[email protected]> Tue, 1 Apr 2003 16:51:28 -0800
Newsgroups gmane.comp.security.ids.snort.snarf
Message-ID <[email protected]>
It looks like you need to download some modules from CPAN
(search.cpan.org)=20
Here is the link:
http://search.cpan.org/author/MUIR/Time-modules-2003.0211/ for the
obvious missing.. err.. link.

Mike


 Mike Koponick
 RedHawk. - Network Engineering

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify
 [email protected].
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


-----Original Message-----
From: Don&Brigitte [mailto:[email protected]]=20
Sent: Tuesday, April 01, 2003 1:27 PM
To: [email protected]
Subject: [Snortsnarf] Can't get snortsnarf to work

Sorry for this email I am sure you have gotten a ton of them. However I=20
am unable to get snortsnarf to work. My command line usage is a follows

monkeylabs:/home/don/SnortSnarf-021111.1 # ./snortsnarf.pl -gmt=20
/home/don/OOS_Report_2003_03_26_15824.txt=20
/home/don/OOS_Report_2003_03_27_23034.txt

This results in the following error

Can't locate Time/ParseDate.pm in @INC (@INC contains: ./include=20
/usr/lib/perl5/5.6.1/i586-linux /usr/lib/perl5/5.6.1=20
/usr/lib/perl5/site_perl/5.6.1/i586-linux /usr/lib/perl5/site_perl/5.6.1

/usr/lib/perl5/site_perl . ./include/SnortSnarf) at=20
include/SnortSnarf/TimeFilters.pm line 18.
BEGIN failed--compilation aborted at include/SnortSnarf/TimeFilters.pm=20
line 18.
Compilation failed in require at include/SnortSnarf/Filter.pm line 19.
BEGIN failed--compilation aborted at include/SnortSnarf/Filter.pm line
19.
Compilation failed in require at ./snortsnarf.pl line 87.
BEGIN failed--compilation aborted at ./snortsnarf.pl line 87.


I have looked in the Time directory and noted nothing there. Could you=20
please tell me if I am invoking this correctly? I basically am trying to

recreate the same type
of output as evidenced on the home page example. Thanks for your time.
Cheers!
Don


_______________________________________________
SnortSnarf-users mailing list
[email protected]
http://www.silicondefense.com/mailman/listinfo/snortsnarf-users