Snort mailing list archives

Re: Unable to make install Snort


From: Russ <rucombs () cisco com>
Date: Sun, 8 Nov 2015 18:36:36 -0500

daq-modules-config should bin /usr/local/bin since your DAQ is under /usr/local. Try just ./configure (w/o sudo). If you really need sudo, make sure your sudo environment is correct.

On 11/8/15 5:51 PM, Mariusz Pianka wrote:

$  echo $PATH

/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin:/home/mpianka/bin

$ export PATH=$PATH:/usr/local/lib

$ export PATH=$PATH:/usr/local/lib/daq

$ echo $path

$ echo $PATH

/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin:/home/mpianka/bin:*/usr/local/lib:/usr/local/lib/daq*

**

*Cd /home/user/snort-2.9.7.6*

*$sudo ./configure*

**

*The same output: *

checking for pcre_compile in -lpcre... yes

checking for libpcre version 6.0 or greater... yes

checking for SHA256_Init in -lcrypto... no

checking for MD5_Init in -lcrypto... no

checking dnet.h usability... yes

checking dnet.h presence... yes

checking for dnet.h... yes

checking dumbnet.h usability... no

checking dumbnet.h presence... no

checking for dumbnet.h... no

checking for eth_set in -ldnet... yes

checking for eth_set in -ldumbnet... no

checking for dlsym in -ldl... yes

*./configure: line 15735: daq-modules-config: command not found*

checking for daq_load_modules in -ldaq_static... no

   ERROR! daq_static library not found, go get it from

http://www.snort.org/.

*From:*Russ [mailto:rucombs () cisco com]
*Sent:* Sunday 8 November 2015 22:41
*To:* Mariusz Pianka <mariusz.pianka () gmail com>; 'Joel Esler (jesler)' <jesler () cisco com>
*Cc:* snort-users () lists sourceforge net
*Subject:* Re: [Snort-users] Unable to make install Snort

Make sure that daq-modules-config is in your PATH when you configure Snort.

On 11/8/15 4:42 PM, Mariusz Pianka wrote:

    I did.

    I used:

    wget https://www.snort.org/downloads/snort/daq-2.0.6.tar.gz
    wget https://www.snort.org/downloads/snort/snort-2.9.7.6.tar.gz

    *From:*Joel Esler (jesler) [mailto:jesler () cisco com]
    *Sent:* Sunday 8 November 2015 21:41
    *To:* Mariusz Pianka <mariusz.pianka () gmail com>
    <mailto:mariusz.pianka () gmail com>
    *Cc:* snort-users () lists sourceforge net
    <mailto:snort-users () lists sourceforge net>
    *Subject:* Re: [Snort-users] Unable to make install Snort

    Need to download the daq installation package from Snort.org
    <http://snort.org>.

    --

    *Joel Esler*

    Manager, Talos

    Sent from my iPhone


    On Nov 8, 2015, at 3:38 PM, Mariusz Pianka
    <mariusz.pianka () gmail com <mailto:mariusz.pianka () gmail com>> wrote:

        Dear Users of Snort,

        I would be very grateful if you could help me complete Snort
        installation on CentOS 6.7 – minimum.

        After 2 hours of google exploration, I have arrived to the
        point which I can’t jump over.

        I started from clean install of CentOS 6.7 minimum.

        I didn’t have any libraries such as gcc and other
        pre-requisites so I’ve executed the following:

        rpm -Uvh
        http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

        yum -y install libpcap libpcap-devel libnet libnet-devel pcre
        pcre-devel gcc gcc-c++ automake autoconf libtool make libyaml
        libyaml-devel zlib zlib-devel file-devel

        I’ve included text file with the list of packages I’ve got
        installed on my system.

        DAQ 2.0.6 folder

        /home/$user$/daq-2.0.6/

        I do ./configure

        Make

        Make install

        It seems to complete, no errors.

        I attached the config.log as daq_config.log

        Then, I go to snort

        I do , ./configure :

        *checking for dlsym in -ldl... yes*

        *./configure: line 15735: daq-modules-config: command not found*

        *checking for daq_load_modules in -ldaq_static... no*

        **

        *   ERROR!  daq_static library not found, go get it from*

        *http://www.snort.org/.*

        **

        *Identical problem to: http://seclists.org/snort/2013/q1/200*

        **

        **

        I’ve attached snort_config.log for your review as well.

        Ultimate goal is to start OpenAppID in IDS mode.


        Can you please point me into the right direction ?

        Thank You kindly

        Mariusz

        **

        ------------------------------------------------------------------------

        Avast logo <https://www.avast.com/antivirus>

                

        This email has been checked for viruses by Avast antivirus
        software.
        www.avast.com <https://www.avast.com/antivirus>

        <packages.txt>

        <daq_config.log>

        <snort_config.log>

        ------------------------------------------------------------------------------

        _______________________________________________
        Snort-users mailing list
        Snort-users () lists sourceforge net
        <mailto:Snort-users () lists sourceforge net>
        Go to this URL to change user options or unsubscribe:
        https://lists.sourceforge.net/lists/listinfo/snort-users
        Snort-users list archive:
        http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

        Please visit http://blog.snort.org to stay current on all the
        latest Snort news!

    ------------------------------------------------------------------------

    Avast logo <https://www.avast.com/antivirus>

        

    This email has been checked for viruses by Avast antivirus software.
    www.avast.com <https://www.avast.com/antivirus>





    ------------------------------------------------------------------------------




    _______________________________________________

    Snort-users mailing list

    Snort-users () lists sourceforge net
    <mailto:Snort-users () lists sourceforge net>

    Go to this URL to change user options or unsubscribe:

    https://lists.sourceforge.net/lists/listinfo/snort-users

    Snort-users list archive:

    http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

    Please visithttp://blog.snort.org  to stay current on all the latest Snort news!



------------------------------------------------------------------------
Avast logo <https://www.avast.com/antivirus>      

This email has been checked for viruses by Avast antivirus software.
www.avast.com <https://www.avast.com/antivirus>



------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: