[Snort-users] DAQ and libpcap 1.1.1 vs 1.0.0

Mike Lococo mikelococo at ...11827...
Fri Nov 5 17:39:29 EDT 2010

Hi Folks,

It appears that DAQ is checking for libpcap exactly 1.0.0 instead of
1.0.0 or greater.

After compiling libpcap-1.1.1 from source on 64-bit Centos 5.5,
attempting to ./configure daq-0.3 fails with:
        checking for libpcap version >= "1.0.0"... no
        ERROR! Libpcap Library version >= 1.0.0 not found.
        Get it from http://www.tcpdump.org

There is an additional error in config.log (contrary to what this
message indicates, there is a /usr/local/lib/libpcap.so.1 available):
        ./conftest: error while loading shared libraries:
        libpcap.so.1: cannot open shared object file: no such
        file or directory

If I make uninstall libpcap-1.1.1, then configure; make; make install
libpcap-1.0.0, then daq-0.3 ./configure finds libpcap and all is well.

Any advice as to what might be going on?

Mike Lococo

More information about the Snort-users mailing list