Re: Snort on OpenBSD 5.0 amd64

[ML mail <mlnospam () yahoo com>]

Yes daq libraries are installed in /usr/local/lib, just in case I copy/pasted a " ls -la /usr/local/lib/*daq*" below:

-rw-r--r--  1 root  wheel  61010 Nov 17 15:22 /usr/local/lib/libdaq.a
-rwxr-xr-x  1 root  wheel    945 Nov 17 15:22 /usr/local/lib/libdaq.la
-rwxr-xr-x  1 root  wheel  44338 Nov 17 15:22 /usr/local/lib/libdaq.so.0.1
-rw-r--r--  1 root  wheel  62828 Nov 17 15:22 /usr/local/lib/libdaq_static.a
-rwxr-xr-x  1 root  wheel    926 Nov 17 15:22 /usr/local/lib/libdaq_static.la
-rw-r--r--  1 root  wheel  95304 Nov 17 15:22 /usr/local/lib/libdaq_static_modules.a
-rwxr-xr-x  1 root  wheel    950 Nov 17 15:22 /usr/local/lib/libdaq_static_modules.la

/usr/local/lib/daq:
total 180
drwxr-xr-x   2 root  wheel    512 Nov 17 15:22 .
drwxr-xr-x  10 root  wheel   2048 Nov 17 15:22 ..
-rwxr-xr-x   1 root  wheel    947 Nov 17 15:22 daq_dump.la
-rwxr-xr-x   1 root  wheel  23716 Nov 17 15:22 daq_dump.so
-rwxr-xr-x   1 root  wheel    967 Nov 17 15:22 daq_ipfw.la
-rwxr-xr-x   1 root  wheel  27162 Nov 17 15:22 daq_ipfw.so
-rwxr-xr-x   1 root  wheel    947 Nov 17 15:22 daq_pcap.la
-rwxr-xr-x   1 root  wheel  28161 Nov 17 15:22 daq_pcap.so

How do I configure shlibs path? I can't remember having to do anything with shlibs path.

Regards,
ML




________________________________
 From: carlopmart <carlopmart () gmail com>
To: snort-users () lists sourceforge net 
Sent: Friday, November 18, 2011 10:26 AM
Subject: Re: [Snort-users] Snort on OpenBSD 5.0 amd64
 
On 11/18/2011 10:12 AM, ML mail wrote:
> Hi,
>
> Did anyone already successfully manage to compile and run Snort 2.9.1.2
> on OpenBSD 5.0 amd64 ?
>
> I had quite a few problems but got through most of them by reading the
> instructions or looking for that problem on google but now I am stuck at
> starting snort itself. I am trying to start Snort with this command:
>
> snort -c /etc/snort/etc/snort.conf -i em1 -D --daq-dir=/usr/local/lib
>
> but unfortunately it fails starting with the following error:
>
> /usr/local/lib/libpcap.so: dlsym: Unable to resolve symbol
> Nov 18 10:09:58 nids snort[12933]: FATAL ERROR: Can't find pcap DAQ!
>
> Does anyone know what could be wrong here?
>
> Many thanks
>
> Regards,
> ML

Have you configured shlibs path?? daq libraries are installed in 
/usr/local/lib?? With default configure, they are in /usr/local/lib/daq ...

-- 
CL Martinez
carlopmart {at} gmail {d0t} com

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!