Snort mailing list archives

Re: Cannot build afpacket module for DAQ 2.0.2


From: James Lay <jlay () slave-tothe-box net>
Date: Fri, 05 Sep 2014 09:09:09 -0600

On 2014-09-05 08:43, Sec Aficionado wrote:
Thanks for your reply. This system was actually built from scratch 
and
all the packages were downloaded from their respective source.

If my understanding is correct, having downloaded libpcap from
tcpdump.org and built it, should be the same as having a distros' dev
packages (please keep me honest here). I have the header files and
everything else as downloaded or built.

Just to make sure, I re-built libpcap and then ran ./configure for
DAQ, but still show:
Build AFPacket DAQ module.. : no

I am attaching the full output of DAQ's ./configure in case this can
provide any additional clues.

Thanks again for your help.
P.S. I just noticed, there is no dumbnet.h I'll look into that while 
I
wait for any additional suggestions.

--- DAQ 2.0.2 Configure Output ---


I don't have dumbnet either, so I'm doubting that's it.  I do see this 
though:


checking whether TPACKET2_HDRLEN is declared... no
checking whether PACKET_TX_RING is declared... no

Where mine is:

checking whether TPACKET2_HDRLEN is declared... yes
checking whether PACKET_TX_RING is declared... yes

Since this is LFS, I'm assuming you have the same kernel source that's 
the current running kernel yes?

James

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: