IDMEF XML Pluggin for Snort

[JasonG]

I have been trying to install the IDMEF-XML pluggin onto a RedHat Linux 7 operating system. Before the installation I installed the following libraries - Libpcap, Libxml2, Libidmef, and NTP. I then followed the steps in the README and INSTALL files within the pluggin directory. When I tried to configure the snort program by using the following command line:

./configure --enable-edmef --with-libidmef-includes=/usr/local/include/libidmef --with-libidmef-libraries=/usr/local/lib --with-libxml-includes=/usr/local/include --with-libxml-libraries=/usr/local/lib

I recieved the following error-

configure:error: libidmef library (idmef) not found in /usr/local/lib

The contents of the /usr/local/lib directory are as follows:

libidmef.a libxml2.a libpcap
libidmef.la libxml2.la xml2Conf.sh
libidmef.so libxml2.so pkgconfig
libidmef.so.0 libxml2.so.2 libidmef.so.0.6.1 libxml2.so.2.3.13

contents of /usr/local/lib/pkgconfig: libxml-2.0.pc

I would appreciate any thoughts or ideas. Thank you for your time!

 

[pmkincaid]

Do you have /usr/local/lib in your /etc/ld.so.conf file? Most of the time it has to be manually entered into that file, then run ldconfig.

Hope this helps,
Paul