Snort mailing list archives

Re: snort_dynamicpreprocessor


From: James Lay via Snort-users <snort-users () lists snort org>
Date: Tue, 18 Sep 2018 10:11:28 -0600

Symlink the command:

/usr/local/bin/daq-modules-config

James

On 2018-09-18 09:56, Sam Johnson wrote:
Okay so weirdly enough… I just went installed on a second machine
(have about 4 or so to do altogether), and I’m now getting the same
exact error:

./configure: line 16264: daq-modules-config: command not found

checking for daq_load_modules in -ldaq_static... no

   ERROR!  daq_static library not found, go get it from

   http://www.snort.org/ [1].

I added in the –with-daq-libraries and –with-daq-includes but it
still doesn’t want to find daq. I made daq, installed the RPM
package of snort… nothing seems to work. I see all the daq libraries
in /usr/local/lib and /usr/local/include. I don’t get why this
wouldn’t work. Any thoughts?

FROM: Carter Waxman (cwaxman) <cwaxman () cisco com>
SENT: Wednesday, September 12, 2018 9:37 AM
TO: Sam Johnson <Sam.Johnson () flagshipcredit com>;
snort-users () lists snort org
SUBJECT: Re: [Snort-users] snort_dynamicpreprocessor

        * For static DAQ, use ./configure
--with-daq-libraries=/usr/local/lib
–with-daq-includes=/usr/local/include and adjust those paths
accordingly, then run make clean and make. ldconfig is for dynamic
libraries.

        * List the contents of the package / rpm and ensure that the paths
in snort.conf match the dynamic paths. The config should be rewritten
automatically if it’s our package or the packager used our spec
file.

Thanks,

Carter

FROM: Snort-users <snort-users-bounces () lists snort org> on behalf of
Sam Johnson <Sam.Johnson () flagshipcredit com>
DATE: Tuesday, September 11, 2018 at 5:01 PM
TO: "snort-users () lists snort org" <snort-users () lists snort org>
SUBJECT: [Snort-users] snort_dynamicpreprocessor

Hello all,

I was able to manually compile snort just fine on my test system. Went
to do it on prod and got the error about not being able to find the
daq static libraries (daq was compiled and installed successfully and
I added /usr/local/lib to ldconfig). So I decided to use the ‘yum
install’ method. Which worked without any issue. When I went to test
run snort I got the error that it was not able to find the
snort_dynamicpreprocessor. Took a look and it is located at
/usr/local/lib/ on my test machine, but I do not have it at all on my
prod machine (which again was installed using yum install).

At first I started going through and commenting out the lines that
were erroring out for the dynamicpreprocessor, but I’d rather just
get that installed and have it if needed. Can anyone tell me how to
actually get it installed? Should I just recompile manually? Or will
that mess up the current snort install?

Thanks for your time!

Sam Johnson

The information transmitted via this email is intended only for the
person or entity to which it is addressed and may contain confidential
and/or privileged material. Any review, retransmission, dissemination
or other use of, or taking of any action in reliance upon this
information by persons or entities other than the intended recipient
is prohibited. If you receive this in error, please contact the sender
and delete the material from any computer.

The information transmitted via this email is intended only for the
person or entity to which it is addressed and may contain confidential
and/or privileged material. Any review, retransmission, dissemination
or other use of, or taking of any action in reliance upon this
information by persons or entities other than the intended recipient
is prohibited. If you receive this in error, please contact the sender
and delete the material from any computer. The information transmitted
via this email is intended only for the person or entity to which it
is addressed and may contain confidential and/or privileged material.
Any review, retransmission, dissemination or other use of, or taking
of any action in reliance upon this information by persons or entities
other than the intended recipient is prohibited. If you receive this
in error, please contact the sender and delete the material from any
computer.

Links:
------
[1] http://www.snort.org/
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules:
https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: