Re: Cannot build afpacket module for DAQ 2.0.2

[James Lay <jlay () slave-tothe-box net>]

On Fri, 2014-09-05 at 21:00 -0400, Sec_Aficionado wrote:

> Thanks so much James, you pointed me in the right direction. I looked at the kernel source and it was outdated. I 
> downloaded and re-built the latest version. It took a while, but now everything runs as expected.
>
> Either there was a bug somewhere or I had made a mistake building the system previously. Now it all seems to work OK.
>
> Now I get to play with snort as IPS. Looking forward to it!
>
> > On Sep 5, 2014, at 11:09 AM, James Lay <jlay () slave-tothe-box net> wrote:
> >
> > > On 2014-09-05 08:43, Sec Aficionado wrote:
> > > Thanks for your reply. This system was actually built from scratch 
> > > and
> > > all the packages were downloaded from their respective source.
> > >
> > > If my understanding is correct, having downloaded libpcap from
> > > tcpdump.org and built it, should be the same as having a distros' dev
> > > packages (please keep me honest here). I have the header files and
> > > everything else as downloaded or built.
> > >
> > > Just to make sure, I re-built libpcap and then ran ./configure for
> > > DAQ, but still show:
> > > Build AFPacket DAQ module.. : no
> > >
> > > I am attaching the full output of DAQ's ./configure in case this can
> > > provide any additional clues.
> > >
> > > Thanks again for your help.
> > > P.S. I just noticed, there is no dumbnet.h I'll look into that while 
> > > I
> > > wait for any additional suggestions.
> > >
> > > --- DAQ 2.0.2 Configure Output ---
> >
> > I don't have dumbnet either, so I'm doubting that's it.  I do see this 
> > though:
> >
> >
> > > checking whether TPACKET2_HDRLEN is declared... no
> > > checking whether PACKET_TX_RING is declared... no
> >
> > Where mine is:
> >
> > checking whether TPACKET2_HDRLEN is declared... yes
> > checking whether PACKET_TX_RING is declared... yes
> >
> > Since this is LFS, I'm assuming you have the same kernel source that's 
> > the current running kernel yes?
> >
> > James


Excellent...hope the rest of the install/configure goes smooth.

James

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!