sguil-client startup problem

[D.Schaft at rn.rabobank.nl]

Paul,

No worries, I had to deinstall tclX, ictl , iwidgets and sguil-client and reinstall them in the same order to make things work. 
Not touching the tcl8.5 installation.

On the server side, Barnyard2 required an extra addition in the Makefile, referencing the --with-tcllib=<path> location (after the mysql reference).
Followed by a deinstall and install , resulting in a working snort -> barnyard2 -> sguil environment.

Thanks for your time.


Met vriendelijke groet / Kind regards,

Danny van der Schaft

-----Oorspronkelijk bericht-----
Van: Paul Schmehl [mailto:pschmehl_lists at tx.rr.com] 
Verzonden: vrijdag 18 maart 2011 20:14
Aan: Schaft van der, D (Danny); freebsd-questions at freebsd.org
Onderwerp: Re: sguil-client startup problem

--On March 17, 2011 4:30:31 PM +0100 D.Schaft at rn.rabobank.nl wrote:

> I have a question regarding the installation and startup of sguil-client
> on a 8.2 Generic OS. It seems that my installation requires an iwidget
> extension when run with tclsh8.4 and receives an error when running
> wish8.4:
>
> Error in startup script: can't read "0": no such variable while executing
> Exec /usr/local/bin/wish8.4 "$0" "$@"  line 5.
>
> I have all the required packages , I suppose
> (tclX-8.4,tcl-8.4,tcllib,tcltls,tk8.4,ictl-3), also the iwidget extension
> is installed... Strangely  enough also version 8.5 is present on the
> system, could that be a problem. Hopefully , there is someone who has
> experienced the same or better yet, has an answer to my problem...
>

Apparently the default tcl install is now 8.5.  Looks like I'm going to 
have to update the ports.

You *may* be able to fix your problem by editing the sguil.tk file, 
although I'm not sure what other impacts that might have.  The script calls 
wish8.4 explicitly, but that probably doesn't exist on your system.  Change 
it to 8.5 and see if that fixes the problem.

-- 
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
*******************************************
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson
"There are some ideas so wrong that only a very
intelligent person could believe in them." George Orwell

======================================================
Rabobank disclaimer: http://www.rabobank.nl/disclaimer