Re: Snort PF_Ring Installation

[Y M <snort () outlook com>]

Did you also compile the PF_RING daq module from ../userland/snort/pfring-daq-module ?
YM

Sent from Mobile




On Fri, Jul 10, 2015 at 6:11 AM -0700, "Davison, Charles Robert" <cdaviso1 () vols utk edu> wrote:
Good Morning,

I am trying to get PF_Ring from Ntop functional. Please see the below steps I have performed thus far. By the way my 
snort installation is functional with BY2, PulledPork, and Snorby. I am running Ubuntu 14.04 (64Bit) and have install 
all the prerequisites for this software. I have used the links below for reference towards installing:

Reference:
[cid:image002.png@01D0BADF.82187A60]
http://www.ntop.org/get-started/download/#PF_RING
https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module/README.1st
http://www.ntop.org/wp-content/uploads/2011/08/n2disk-UsersGuide1.pdf

The below steps are the exact steps that I have performed on this install.

PF_Ring Download Instructions
1.        sudo apt-get update
2.        sudo apt-get upgrade
3.        sudo apt-get install libnuma-dev
5.        git clone https://github.com/ntop/PF_RING.git
6.        cd PF_RING/kernel
7.        make
10.    sudo insmod ./pf_ring.ko
11.    cd ../userland
12.    make

Everything above works without error. The below steps are where I seem to run into trouble.

PF_Ring - Daq-Module Installation


13.    cd snort_src/daq-2.0.5
14.    autoreconf -ivf (Appears to execute properly.)
15.    ./configure (See attachment for output)
16.    make (See attachment for output)
17.    sudo make install (See attachment for output)

After the PF Ring Daq install is complete I attempt to run snort but receive the output below:

Snort Error:
[cid:image001.jpg@01D0BADE.F8F95420]

If you have any suggestions on how I can make this install successful please let me know.

Thank you,

Charles Davison

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!