snortsnarf running problem on FreeBSD

"lskuo" <[email protected]> Sat, 27 Sep 2003 15:31:31 +0800 (CST)
Newsgroups gmane.comp.security.ids.snort.snarf
Message-ID <[email protected]>
Hello,=20all!
=20=20I=20am=20running=20Snort=20(2.0.1)=20+=20SnortSnarf=20(021111)=20on=20=
FreeBSD=205.1.
=20=20I=20used=20ports=20installation=20to=20install=20both=20of=20them.
=20=20Snort=20is=20running=20ok.=20But=20snortsnarf=20is=20not.

=20=20First,=20it=20put=20snortsnarf=20(perl=20script)instead=20of=20snortsn=
arf.pl=20in=20/usr/local/bin.
=20=20(That's=20a=20minor=20problem=20once=20snortsnarf=20could=20work.)

=20=20Second,=20when=20I=20tried=20to=20run=20this=20snortsnarf:=20(my=20sno=
rt=20log=20file=20is=20snort_all_full0
=20=20=20=20=20=20=20=20=20=20snortsnarf=20-d=20/usr/local/www/data/snortsna=
rf=20/var/log/snort/snort_alert_full
=20=20I=20got=20the=20following=20message:

=20=20=20=20=20=20=20=20Can't=20locate=20IPObfuscater.pm=20in=20@INC=20(@INC=
=20contains:=20/usr/local/libdata/snortsnarf/
=20=20=20=20=20=20=20=20=20/usr/local/lib/perl5/site_perl/5.6.1/mach=20/usr/=
local/lib/perl5/site_perl/5.6.1
=20=20=20=20=20=20=20=20=20/usr/local/lib/perl5/site_perl=20/usr/local/lib/p=
erl5/5.6.1/BSDPAN
=20=20=20=20=20=20=20=20=20/usr/local/lib/perl5/5.6.1/mach=20/usr/local/lib/=
perl5/5.6.1=20.
=20=20=20=20=20=20=20=20=20/usr/local/libdata/snortsnarf//SnortSnarf)=20at=20=
/usr/local/bin/snortsnarf=20line=2092.
=20=20=20=20=20=20=20=20BEGIN=20failed--compilation=20aborted=20at=20/usr/lo=
cal/bin/snortsnarf=20line=2092.

=20=20However,=20if=20I=20unziped=20the=20source=20code=20from=20/usr/ports/=
distfiles=20and=20used=20the
original=20snortsnarf.pl,=20I=20got=20it=20work=20once.=20But=20when=20the=20=
log=20file=20was=20appended=20and
I=20tred=20to=20run=20it=20again,=20I=20got=20the=20following:

=20=20=20=20=20=20=20Can't=20locate=20AllMode.pm=20n=20@INC=20(@INC=20contai=
ns:=20./include=20/usr/local/lib/perl5/site_perl/5.6.1/mach
=20=20=20=20=20=20=20/usr/local/lib/perl5/site_perl/5.6.1=20/usr/local/lib/p=
erl5/site_perl=20/usr/local/lib/perl5/5.6.1/BSDPAN
=20=20=20=20=20=20=20/usr/local/lib/perl5/5.6.1/mach=20/usr/local/lib/perl5/=
5.6.1=20.)=20at=20/usr/local/bin/snortsnarf.pl=20line=2085.
=20=20=20=20=20=20=20BEGIN=20failed--compilation=20aborted=20at=20/usr/local=
/bin/snortsnarf.pl=20line=2085.

=20=20What's=20wrong?=20And=20how=20can=20I=20fixed=20it?=20My=20perl=20is=20=
Perl=205.6.1_13.=20I=20am=20wondering=20if=20the=20ports=20installation=20
is=20completed=20or=20not.=20Will=20it=20happen=20next=20time=20that=20some=20=
other=20pm=20files=20missing?
=20=20Thank=20you=20very=20much.
=20=20
=20=20
=20=20Long-Sheng=20=20=20Sep.=2027,=2003