Re: HELP!

[James Lay <jlay () slave-tothe-box net>]

On 2014-03-24 14:04, stephanie sokhn wrote:
> Hello,
>  Thanks a lot james for your reply. I already tried to do that and
> still can't get my nfq and ipq module to build . Is it my 13.10 
> ubuntu
> or my snort 2.9.6.0?? Can this be the problem?
>
>  Thanks again for your kind help.
>  Stephanie
>
>  --- Original Message ---
>
>  From: "James Lay" <jlay () slave-tothe-box net>
>  Sent: March 24, 2014 1:13 PM
>  To: snort-users () lists sourceforge net
>  Subject: Re: [Snort-users] HELP!
>
> On Sun, 2014-03-23 at 21:33 +0200, stephanie sokhn wrote:
>
> > Hello,
>
> > I'be been trying to use snort in its inline mode. I have an ubuntu
> > 13.10 and i've tried to use daq-1.1.1 and daq-2.0.2 and i still
> > can't build an IPQ or an NFQ module. I've downloaded the
> > libpcap-1.1.1 and libdnet-1.12 and as mentioned in the read me file
> > in daq-2.0.2, i tried to fix the ac.configure issue.

Well..in trying to install this on 13 (installs fine in 12) I get this:

libtool: install: (cd /home/jlay/snort/daq-2.0.2/os-daq-modules; 
/bin/bash /home/jlay/snort/daq-2.0.2/libtool  --tag CC --mode=relink gcc 
-DBUILDING_SO -fPIC -g -O2 -fvisibility=hidden -Wall -Wwrite-strings 
-Wsign-compare -Wcast-align -Wextra -Wformat -Wformat-security 
-Wno-unused-parameter -fno-strict-aliasing -fdiagnostics-show-option 
-pedantic -std=c99 -D_GNU_SOURCE -module -export-dynamic -avoid-version 
-shared -L/usr/lib -ldnet -o daq_nfq.la -rpath /usr/lib/daq 
daq_nfq_la-daq_nfq.lo -lnfnetlink -lnetfilter_queue -L/usr/lib -ldnet 
../sfbpf/libsfbpf.la )
libtool: relink: gcc -shared  -fPIC -DPIC  .libs/daq_nfq_la-daq_nfq.o   
-L/usr/lib -lnfnetlink -lnetfilter_queue -ldnet -lsfbpf  -O2   
-Wl,-soname -Wl,daq_nfq.so -o .libs/daq_nfq.so
/usr/bin/ld: /usr/lib/libdnet.a(addr.o): relocation R_X86_64_32 against 
`.rodata.str1.1' can not be used when making a shared object; recompile 
with -fPIC
/usr/lib/libdnet.a: error adding symbols: Bad value
collect2: error: ld returned 1 exit status
libtool: install: error: relink `daq_nfq.la' with the above command 
before installing it
make[2]: *** [install-pkglibLTLIBRARIES] Error 1
make[2]: Leaving directory `/home/jlay/snort/daq-2.0.2/os-daq-modules'
make[1]: *** [install-am] Error 2
make[1]: Leaving directory `/home/jlay/snort/daq-2.0.2/os-daq-modules'
make: *** [install-recursive] Error 1

This was configured with "CFLAGS=-fPIC -g -O2"

I can tell you that libdaq is gone in 13, so you'll only be able to get 
NFQ.  That's as far as I got.

James

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!