Snort mailing list archives
RE: SNORT and LIBPCAP
From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Thu, 20 Nov 2003 10:51:22 -0600
________________________________ From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Lambeth, Darwin Sent: Thursday, November 20, 2003 7:09 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] SNORT and LIBPCAP > ERROR! Libpcap library/headers not found, go get it from > http://www.tcpdump.org > or use the --with-libpcap-* options, if you have it installed > in unusual place I have been hunting for a fix for this to no avail. Can somebody please tell why this is happening? Libpcap and Flex are both installed and functioning properly. It sounds like SNORT is a poorly constructed program. Bad assumption. What do you mean when you say "hunting for a fix"? You haven't told us what OS you're using. You haven't posted your configure options. That makes it really tough to provide an answer for you. Most *nix platforms will allow you to search for things using either find(1L), locate(1) or slocate(1). Your compiler is probably looking for pcap.h, I would imagine. Where is it located? What happens when you run ./configure --help? Is there an option that looks like this: "--with-libpcap=" ? If there is, use --with-pcap=/usr/include, if that's where pcap.h is. (Hint: the error message is telling you to use that option.) Finally, if you don't fully understand how to compile from source, you might want to consider using the packaging system that your OS offers (rpm, pkg, etc.) to install rather than trying to do it the hard way. Most packaging systems have already resolved all those issues for you. Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/~pauls/
Current thread:
- SNORT and LIBPCAP Lambeth, Darwin (Nov 20)
- <Possible follow-ups>
- RE: SNORT and LIBPCAP Schmehl, Paul L (Nov 20)