Snort mailing list archives

NFQ DAQ "module version issue" on Debian


From: Bobby Venal <bobby.venal () gmail com>
Date: Sun, 20 Oct 2013 19:33:58 -0700

Hello,

I'm trying to use the NFQ DAQ on a current Debian wheezy box, but run into
this error:

# snort --daq-dir /usr/local/lib/daq/ --daq-list
afpacket: Module API version (0x10002) differs from expected version
(0x10001)
/usr/local/lib/daq//daq_afpacket.so: Failed to register DAQ module.
pcap: Module API version (0x10002) differs from expected version (0x10001)
/usr/local/lib/daq//daq_pcap.so: Failed to register DAQ module.
ipfw: Module API version (0x10002) differs from expected version (0x10001)
/usr/local/lib/daq//daq_ipfw.so: Failed to register DAQ module.
nfq: Module API version (0x10002) differs from expected version (0x10001)
/usr/local/lib/daq//daq_nfq.so: Failed to register DAQ module.
dump: Module API version (0x10002) differs from expected version (0x10001)
/usr/local/lib/daq//daq_dump.so: Failed to register DAQ module.
Available DAQ modules:
pcap(v3): readback live multi unpriv
ipfw(v2): live inline multi unpriv
dump(v1): readback live inline multi unpriv
afpacket(v4): live inline multi unpriv

I downloaded and compiled daq-2.0.1 and snort-2.9.5.5 from the snort
website as per the instructions from:
http://vrt-blog.snort.org/2010/08/snort-29-essentials-daq.html

And googling that error doesn't seem to bring up much relevant
troubleshooting information.

Any direction greatly appreciated,
-Bobby
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: