Snort mailing list archives

Re: libpcap error when compiling daq0.5


From: "Weir, Jason" <jason.weir () nhrs org>
Date: Tue, 7 Jun 2011 09:06:03 -0400

Any error messages during configure or make?

-----Original Message-----
From: Lutfi ODUNCUOGLU [mailto:lutfio () metu edu tr] 
Sent: Tuesday, June 07, 2011 9:04 AM
To: Weir, Jason
Subject: Re: [Snort-users] libpcap error when compiling daq0.5


I compiled libpcap same way as below and libdnet too. But I got same
error. Moreover, I also tried installing by checkinstall it 
did not work
too.

On 06/07/2011 03:46 PM, Weir, Jason wrote:
Try this - give us the output if it doesn't work..

# cd /usr/src
# wget http://www.tcpdump.org/release/libpcap-1.1.1.tar.gz
# tar -zxf  libpcap-1.1.1.tar.gz && cd libpcap-1.1.1
# ./configure --prefix=/usr --enable-shared
# make && make install

# cd /usr/src
# wget http://www.snort.org/dl/snort-current/daq-0.5.tar.gz
# tar -zxf daq-0.5.tar.gz && cd daq-0.5
# vi /usr/src/daq-0.5/os-daq-modules/daq_pcap.c

on line 219 replace:
context->buffer_size = strtol(entry->key, NULL, 10);
with:
context->buffer_size = strtol(entry->value, NULL, 10);

# ./configure
# make && make install
# echo >> /etc/ld.so.conf /usr/lib && ldconfig


-J


-----Original Message-----
From: Lutfi ODUNCUOGLU [mailto:lutfio () metu edu tr] 
Sent: Tuesday, June 07, 2011 8:16 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] libpcap error when compiling daq0.5


Hello,

I am trying to compile daq0.5 on Debian Squeeze. First I compiled
libpcap-1.1.1 and there is no problem. However when I 
tried to compile
daq0.5 I got an error

ERROR!  Libpcap library version >= 1.0.0 not found.
    Get it from http://www.tcpdump.org

I also tried to compile daq0.5 with libpcap-1.0.0 and got the 
same error.

I need urgent help.

Regards,

Lutfi


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: