Re: ERROR: Can't find pcap DAQ!

[Russ Combs <rcombs () sourcefire com>]

On Fri, Jan 6, 2012 at 9:43 PM, Jonathan S. Abrams <
jonathansabrams () gmail com> wrote:

> Thanks for the suggestion.  I discovered that I need to run this command
> to avoid the error message.
>
> sudo snort -de -i en0 --daq-dir /usr/local/lib/daq
>
> I took a look in the readme that comes with daq 0.6.2, and it is installed
> where the readme says it would be.  Is it a problem that daq is installed
> in /usr/local/lib/daq?  Will Snort not work without the option above in all
> commands?  If this is a problem that will prevent Snort from working, what
> is the best way to resolve it?

--daq-dir is not required if the static DAQ is built.  Your config.log will
probably have a clue as to why that wasn't built.

> Thanks for reading!
>
> On Fri, Jan 6, 2012 at 9:13 PM, Randy <pa-kimchi () garnet inbox5 com> wrote:
>
> > try adding "--daq-dir /usr/lib/daq" to the command
> >
> >
> >
> > > Hello,
> > >
> > > I have installed Snort v2.9.2 on OS X v10.4.11.  I am trying to see if
> > > Snort is working by using the following command.
> > >
> > > sudo snort -de -i en0
> > >
> > > After entering that command, I receive the following error.
> > >
> > > Running in packet dump mode
> > >
> > >         --== Initializing Snort ==--
> > > Initializing Output Plugins!
> > > ERROR: Can't find pcap DAQ!
> > > Fatal Error, Quitting..
> > >
> > > Any guidance is appreciated.  Thanks for reading!
> > ------------------------------------------------------------------------------
> > > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a
> > > complex
> > > infrastructure or vast IT resources to deliver seamless, secure access
> > > to
> > > virtual desktops. With this all-in-one solution, easily deploy virtual
> > > desktops for less than the cost of PCs and save 60% on VDI
> > > infrastructure
> > > costs. Try it free!
> > http://p.sf.net/sfu/Citrix-VDIinabox_______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> > > Please visit http://blog.snort.org to stay current on all the latest
> > > Snort news!
>
>
>
> ------------------------------------------------------------------------------
> Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
> infrastructure or vast IT resources to deliver seamless, secure access to
> virtual desktops. With this all-in-one solution, easily deploy virtual
> desktops for less than the cost of PCs and save 60% on VDI infrastructure
> costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!