Snort mailing list archives

Can't find nfq DAQ


From: James Lay <jlay () slave-tothe-box net>
Date: Thu, 06 Mar 2014 18:01:19 -0700

Topic says it....so here's the setup:

Slackware 13.1 x64

compiled:
libmnl-1.0.3
libnetfilter_queue-1.0.2
libnfnetlink-1.0.1

from source all with:
./configure --prefix=/usr --libdir=/usr/lib64 --enable-static=no

snort --daq-dir /usr/local/lib/daq --daq-list

Available DAQ modules:
nfq(v7): live inline multi
pcap(v3): readback live multi unpriv
ipq(v6): live inline multi
ipfw(v3): live inline multi unpriv
dump(v2): readback live inline multi unpriv
afpacket(v5): live inline multi unpriv

but for the life of me it just doesn't load up.  Misc info:


ldd `which snort`
        linux-vdso.so.1 =>  (0x00007fff8c151000)
        libcrypto.so.0 => /lib64/libcrypto.so.0 (0x00007fb2a7a11000)
        libpcre.so.0 => /usr/lib64/libpcre.so.0 (0x00007fb2a77ec000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fb2a75d2000)
        libuuid.so.1 => /lib64/libuuid.so.1 (0x00007fb2a73cf000)
        libm.so.6 => /lib64/libm.so.6 (0x00007fb2a714c000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007fb2a6f48000)
        libipq.so.0 => /usr/lib64/libipq.so.0 (0x00007fb2a6d46000)
        libnetfilter_queue.so.1 => /usr/lib64/libnetfilter_queue.so.1
(0x00007fb2a6b40000)
        libnfnetlink.so.0 => /usr/lib64/libnfnetlink.so.0 (0x00007fb2a693a000)
        libmnl.so.0 => /usr/lib64/libmnl.so.0 (0x00007fb2a6736000)
        libsfbpf.so.0 => /usr/local/lib/libsfbpf.so.0 (0x00007fb2a6511000)
        libpcap.so.1 => /usr/lib64/libpcap.so.1 (0x00007fb2a62dd000)
        libdnet.1 => /lib64/libdnet.1 (0x00007fb2a60cb000)
        libz.so.1 => /usr/lib64/libz.so.1 (0x00007fb2a5eb7000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fb2a5c9a000)
        libc.so.6 => /lib64/libc.so.6 (0x00007fb2a5925000)
        /lib64/ld-linux-x86-64.so.2 (0x00007fb2a7d97000)

Any hints would be appreciated...thanks!

James

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: