Re: NFQ DAQ "module version issue" on Debian

[Bobby Venal <bobby.venal () gmail com>]

I was able to fix this locally.  In case anyone else runs into this, on
Debian I had to uninstall the snort packages and the libdaq packages.

Once there was no other trace of Debian daq includes and libraries, the
downloaded and compiled ones worked fine.


On Sun, Oct 20, 2013 at 7:33 PM, Bobby Venal <bobby.venal () gmail com> wrote:

> Hello,
>
> I'm trying to use the NFQ DAQ on a current Debian wheezy box, but run into
> this error:
>
> # snort --daq-dir /usr/local/lib/daq/ --daq-list
> afpacket: Module API version (0x10002) differs from expected version
> (0x10001)
> /usr/local/lib/daq//daq_afpacket.so: Failed to register DAQ module.
> pcap: Module API version (0x10002) differs from expected version (0x10001)
> /usr/local/lib/daq//daq_pcap.so: Failed to register DAQ module.
> ipfw: Module API version (0x10002) differs from expected version (0x10001)
> /usr/local/lib/daq//daq_ipfw.so: Failed to register DAQ module.
> nfq: Module API version (0x10002) differs from expected version (0x10001)
> /usr/local/lib/daq//daq_nfq.so: Failed to register DAQ module.
> dump: Module API version (0x10002) differs from expected version (0x10001)
> /usr/local/lib/daq//daq_dump.so: Failed to register DAQ module.
> Available DAQ modules:
> pcap(v3): readback live multi unpriv
> ipfw(v2): live inline multi unpriv
> dump(v1): readback live inline multi unpriv
> afpacket(v4): live inline multi unpriv
>
> I downloaded and compiled daq-2.0.1 and snort-2.9.5.5 from the snort
> website as per the instructions from:
> http://vrt-blog.snort.org/2010/08/snort-29-essentials-daq.html
>
> And googling that error doesn't seem to bring up much relevant
> troubleshooting information.
>
> Any direction greatly appreciated,
> -Bobby
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!