I am new to this forum. I would appreciate any assistance.

I am trying to install sguil client on a CentOS VM, but when I run the sguil.tk script, it can't see the first package sha1 in tcllib. I know its installed. Its in the /usr/local/lib/tcllib1.9 dir. I know sguil.tk reads from sguil.conf, but no where in the conf file does it tell it to look for it. I thought it might be looking in /usr/local/, so I linked them, but no dice.

I tried including an option when running it to tell it where tcllib is, but nothing.

I know the sguil.tk opens wish, which I think its a small program that runs tcl, maybe that environment can not find tcllib.

Error: The sha1 package does NOT appear to be installed on this system. The sha1 package is part of the tcllib extension...

Any ideas?

Thanks,

I was able to install the sguil client with no issues on latest Fedora.

I guess not all Yum repositories are created equal, I am no expert. Maybe the way and where it installs the tcl*/tk* packages in CentOS and the lack there of made the difference.

tcllib(-1.10-1.el5) : You may have got the package
by coincidence in Fedora.

# yum install tcllib
.. will do , I guess.

'tcllib' is in the 'epel repo'.
https://fedoraproject.org/wiki/EPEL
> > Extra Packages for Enterprise Linux
.....

Thank you, that did it.

I installed the EPEL repository, and all packages tcllib, itcl, itk, iwidgets were there.

rpm -Uvh http://download.fedora.redhat.com/pu...5-3.noarch.rpm

yum install tcllib itcl itk iwidgets

Thanks again.

I know this thread is rather old, but I am banging my head with the same issues. RHEL 5 and I am trying to run the "sguild" program and get this:

[root@sguil01.root ~]# sguild
ERROR: The sha1 package does NOT appear to be installed on this sysem.
The sha1 package is part of the tcllib extension. A port/package is available for most linux and BSD systems.
SGUILD: Exiting...

I don't understand why sha1 is required rather than sha2, but that's neither here nor there.

The tcllib stuff is loaded:
[root@sguil01.root ~]# rpm -qa tcllib
tcllib-1.11.1-1.el5


I do have tcl and tclx built in another location, away from the default
tcl (because I need non-threading tcl).

Help before I pull out what little hair I have left!!!

Thanks,

Ray

Sorry for the late response. You still having issues?

I can not remember what I had installed when that error came up. After that experience with sguil (sguil is very fickle), I made sure to have EPEL repos installed to make sure all packages needed with sguil client are downloaded and installed.

Unfortunately I have bigger issues now.

Our RH support attempted to update all of our linux boxes
to RHEL 5.5. When they got to my Snort/Sguil box, there
were so many broken dependencies they gave up.

The IDS I was tasked to do was downgraded in priority for
now. I will have to start over from scratch.

I am not looking forward to this as it was a real pain in the
butt....

Thanks,

Ray