Snort mailing list archives
SOLVED: snort-2.9.4.1 startup message: Can't start DAQ (-1) .. Fatal Error, Quitting..
From: flashl <flashl () cox net>
Date: Fri, 29 Mar 2013 14:40:23 -0500
It never fails ... Each time I send a request to the list for help, I finally manage to solve the problem. In my case, during migration from FC17 to FC18, I uninstalled snort. However, as I discovered today, there were remnants from old install still on system. Specifically, files: snort snort-plain from old install still reside in /usr/sbin. After I symbolically linked 2.9.4.1 version in /usr/sbin startup was successful. On Fri, 2013-03-29 at 11:47 -0500, Maple Thorpe wrote:
Greetings, I've successfully complied and installed snort 2.9.4.1 and dag 2.0 tarballs. However, the above startup error message persist whether user is privileged and unprivileged. While searching for an answer I found and applied patch: http://seclists.org/snort/2013/q1/att-803/daq_ipfw-remove-capa-unpriv-start.diff but message Host environment: FC18 x86-64 DAQ: ./configure && make && make install SNORT: ./configure --enable-sourcefire && make && make install Snort -V ,,_ -*> Snort! <*- o" )~ Version 2.9.4.1 GRE (Build 69) '''' By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using libpcap version 1.3.0 Using PCRE version: 8.31 2012-07-06 Using ZLIB version: 1.2.7 Is this a kernel problem or am I missing something? Another question while I'm here, how to I build so-rules? Thanks in advance ------------------------------------------------------------------------------ Own the Future-Intel(R) Level Up Game Demo Contest 2013 Rise to greatness in Intel's independent game demo contest. Compete for recognition, cash, and the chance to get your game on Steam. $5K grand prize plus 10 genre and skill prizes. Submit your demo by 6/6/13. http://altfarm.mediaplex.com/ad/ck/12124-176961-30367-2 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- SOLVED: snort-2.9.4.1 startup message: Can't start DAQ (-1) .. Fatal Error, Quitting.. flashl (Apr 02)