Re: snort_dynamicpreprocessor

[Sam Johnson <Sam.Johnson () flagshipcredit com>]

James was able to help me figure out the issue.
Had to symlink daq-modules-config to /bin since I was running under root. Cleared the issue right up and was able to 
make Snort.

Sam Johnson


-----Original Message-----
From: James Lay <jlay () slave-tothe-box net>
Sent: Tuesday, September 18, 2018 1:22 PM
To: Sam Johnson <Sam.Johnson () flagshipcredit com>
Subject: Re: [Snort-users] snort_dynamicpreprocessor

Excellent...might wanna shoot that info out to the list so other folks with the same question will get the answer :)  
And FWIW the reason is that /usr/local/bin isn't in root's path...kinda dumb but there it is.

James

On 2018-09-18 11:20, Sam Johnson wrote:
> I am under root. Also, I checked my other box and it also had the
> daq-modules-config under /bin. So I symlinked it to there from
> /usr/local/bin and was able to successfully run ./configure! Thanks
> for the help!
>
> Sam Johnson
>
> -----Original Message-----
> From: James Lay <jlay () slave-tothe-box net>
> Sent: Tuesday, September 18, 2018 1:19 PM
> To: Sam Johnson <Sam.Johnson () flagshipcredit com>
> Subject: Re: [Snort-users] snort_dynamicpreprocessor
>
> Try and run it......and are you ./configuring as sudo or root by
> chance?
>
> On 2018-09-18 11:15, Sam Johnson wrote:
> > Daq-config-modules is located at /usr/local/bin
> >
> > Sam Johnson
> >
> >
> > -----Original Message-----
> > From: James Lay <jlay () slave-tothe-box net>
> > Sent: Tuesday, September 18, 2018 1:15 PM
> > To: Sam Johnson <Sam.Johnson () flagshipcredit com>
> > Subject: Re: [Snort-users] snort_dynamicpreprocessor
> >
> > Where is the file currently at?
> >
> >
> >
> > On 2018-09-18 11:13, Sam Johnson wrote:
> > > Hi James,
> > >
> > > Where would I symlink that daq-modules-config to?
> > >
> > > Thanks,
> > >
> > > Sam Johnson
> > >
> > >
> > > -----Original Message-----
> > > From: Snort-users <snort-users-bounces () lists snort org> On Behalf Of
> > > James Lay via Snort-users
> > > Sent: Tuesday, September 18, 2018 12:11 PM
> > > To: snort-users () lists snort org
> > > Subject: Re: [Snort-users] snort_dynamicpreprocessor
> > >
> > > Symlink the command:
> > >
> > > /usr/local/bin/daq-modules-config
> > >
> > > James
> > >
> > > On 2018-09-18 09:56, Sam Johnson wrote:
> > > > Okay so weirdly enough… I just went installed on a second machine
> > > > (have about 4 or so to do altogether), and I’m now getting the same
> > > > exact error:
> > > >
> > > > ./configure: line 16264: daq-modules-config: command not found
> > > >
> > > > checking for daq_load_modules in -ldaq_static... no
> > > >
> > > >    ERROR!  daq_static library not found, go get it from
> > > >
> > > >    http://www.snort.org/ [1].
> > > >
> > > > I added in the –with-daq-libraries and –with-daq-includes but it
> > > > still doesn’t want to find daq. I made daq, installed the RPM
> > > > package of snort… nothing seems to work. I see all the daq
> > > > libraries in /usr/local/lib and /usr/local/include. I don’t get why
> > > > this wouldn’t work. Any thoughts?
> > > >
> > > > FROM: Carter Waxman (cwaxman) <cwaxman () cisco com>
> > > > SENT: Wednesday, September 12, 2018 9:37 AM
> > > > TO: Sam Johnson <Sam.Johnson () flagshipcredit com>;
> > > > snort-users () lists snort org
> > > > SUBJECT: Re: [Snort-users] snort_dynamicpreprocessor
> > > >
> > > >  * For static DAQ, use ./configure
> > > > --with-daq-libraries=/usr/local/lib
> > > > –with-daq-includes=/usr/local/include and adjust those paths
> > > > accordingly, then run make clean and make. ldconfig is for dynamic
> > > > libraries.
> > > >
> > > >  * List the contents of the package / rpm and ensure that the paths
> > > > in snort.conf match the dynamic paths. The config should be
> > > > rewritten automatically if it’s our package or the packager used
> > > > our spec file.
> > > >
> > > > Thanks,
> > > >
> > > > Carter
> > > >
> > > > FROM: Snort-users <snort-users-bounces () lists snort org> on behalf
> > > > of Sam Johnson <Sam.Johnson () flagshipcredit com>
> > > > DATE: Tuesday, September 11, 2018 at 5:01 PM
> > > > TO: "snort-users () lists snort org" <snort-users () lists snort org>
> > > > SUBJECT: [Snort-users] snort_dynamicpreprocessor
> > > >
> > > > Hello all,
> > > >
> > > > I was able to manually compile snort just fine on my test system.
> > > > Went to do it on prod and got the error about not being able to
> > > > find the daq static libraries (daq was compiled and installed
> > > > successfully and I added /usr/local/lib to ldconfig). So I decided
> > > > to use the ‘yum install’ method. Which worked without any issue.
> > > > When I went to test run snort I got the error that it was not able
> > > > to find the snort_dynamicpreprocessor. Took a look and it is
> > > > located at /usr/local/lib/ on my test machine, but I do not have it
> > > > at all on my prod machine (which again was installed using yum install).
> > > >
> > > > At first I started going through and commenting out the lines that
> > > > were erroring out for the dynamicpreprocessor, but I’d rather just
> > > > get that installed and have it if needed. Can anyone tell me how to
> > > > actually get it installed? Should I just recompile manually? Or
> > > > will that mess up the current snort install?
> > > >
> > > > Thanks for your time!
> > > >
> > > > Sam Johnson
> > > >
> > > > The information transmitted via this email is intended only for the
> > > > person or entity to which it is addressed and may contain
> > > > confidential and/or privileged material. Any review,
> > > > retransmission, dissemination or other use of, or taking of any
> > > > action in reliance upon this information by persons or entities
> > > > other than the intended recipient is prohibited. If you receive
> > > > this in error, please contact the sender and delete the material from any computer.
> > > >
> > > > The information transmitted via this email is intended only for the
> > > > person or entity to which it is addressed and may contain
> > > > confidential and/or privileged material. Any review,
> > > > retransmission, dissemination or other use of, or taking of any
> > > > action in reliance upon this information by persons or entities
> > > > other than the intended recipient is prohibited. If you receive
> > > > this in error, please contact the sender and delete the material
> > > > from any computer. The information transmitted via this email is
> > > > intended only for the person or entity to which it is addressed and
> > > > may contain confidential and/or privileged material.
> > > > Any review, retransmission, dissemination or other use of, or
> > > > taking of any action in reliance upon this information by persons
> > > > or entities other than the intended recipient is prohibited. If you
> > > > receive this in error, please contact the sender and delete the
> > > > material from any computer.
> > > >
> > > > Links:
> > > > ------
> > > > [1] http://www.snort.org/
> > > > _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users () lists snort org
> > > > Go to this URL to change user options or unsubscribe:
> > > > https://lists.snort.org/mailman/listinfo/snort-users
> > > >
> > > > To unsubscribe, send an email to:
> > > > snort-users-leave () lists snort org
> > > >
> > > > Please visit http://blog.snort.org to stay current on all the
> > > > latest Snort news!
> > > >
> > > > Please follow these rules:
> > > > https://snort.org/faq/what-is-the-mailing-list-etiquette
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists snort org
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.snort.org/mailman/listinfo/snort-users
> > >
> > > To unsubscribe, send an email to:
> > > snort-users-leave () lists snort org
> > >
> > > Please visit http://blog.snort.org to stay current on all the latest
> > > Snort news!
> > >
> > > Please follow these rules:
> > > https://snort.org/faq/what-is-the-mailing-list-etiquette
> > > The information transmitted via this email is intended only for the
> > > person or entity to which it is addressed and may contain
> > > confidential and/or privileged material. Any review, retransmission,
> > > dissemination or other use of, or taking of any action in reliance
> > > upon this information by persons or entities other than the intended
> > > recipient is prohibited. If you receive this in error, please
> > > contact the sender and delete the material from any computer.
> > The information transmitted via this email is intended only for the
> > person or entity to which it is addressed and may contain
> > confidential and/or privileged material. Any review, retransmission,
> > dissemination or other use of, or taking of any action in reliance
> > upon this information by persons or entities other than the intended
> > recipient is prohibited. If you receive this in error, please contact
> > the sender and delete the material from any computer.
> The information transmitted via this email is intended only for the
> person or entity to which it is addressed and may contain confidential
> and/or privileged material. Any review, retransmission, dissemination
> or other use of, or taking of any action in reliance upon this
> information by persons or entities other than the intended recipient
> is prohibited. If you receive this in error, please contact the sender
> and delete the material from any computer.
The information transmitted via this email is intended only for the person or entity to which it is addressed and may 
contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking 
of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. 
If you receive this in error, please contact the sender and delete the material from any computer.
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette