[Snort-users] compiling daq in old custom environment...

Eoin Miller eoin.miller at ...14586...
Tue Oct 5 16:28:49 EDT 2010


  On 10/5/2010 8:13 PM, waldo kitty wrote:
> any clues about the following failure?
>
> daq_pcap.c: In function `pcap_daq_open':
> daq_pcap.c:119: warning: implicit declaration of function `pcap_create'
> daq_pcap.c:119: warning: assignment makes pointer from integer without a cast
> daq_pcap.c:122: warning: implicit declaration of function `pcap_set_snaplen'
> daq_pcap.c:124: warning: implicit declaration of function `pcap_set_promisc'
> daq_pcap.c:126: warning: implicit declaration of function `pcap_set_timeout'
> daq_pcap.c:128: warning: implicit declaration of function `pcap_set_buffer_size'
> daq_pcap.c:130: warning: implicit declaration of function `pcap_activate'
> daq_pcap.c:155: error: `PCAP_ERROR' undeclared (first use in this function)
> daq_pcap.c:155: error: (Each undeclared identifier is reported only once
> daq_pcap.c:155: error: for each function it appears in.)
> daq_pcap.c:155: error: `PCAP_ERROR_NO_SUCH_DEVICE' undeclared (first use in this
> function)
> daq_pcap.c:155: error: `PCAP_ERROR_PERM_DENIED' undeclared (first use in this
> function)
> daq_pcap.c:158: warning: implicit declaration of function `pcap_statustostr'
> daq_pcap.c:158: warning: format argument is not a pointer (arg 5)
> make[4]: *** [libdaq_static_modules_la-daq_pcap.lo] Error 1
> make[4]: Leaving directory `/build/sources/daq/daq-0.2/os-daq-modules'
> make[3]: *** [all-recursive] Error 1
> make[3]: Leaving directory `/build/sources/daq/daq-0.2'
> make[2]: *** [all] Error 2
> make[2]: Leaving directory `/build/sources/daq/daq-0.2'
> make[1]: *** [compile] Error 2
> make[1]: Leaving directory `/build/sources/daq'
> Failed:
> daq FAILED
>
You *must* use libpcap 1.0+. What version of libpcap are you running?

 From RELEASE.NOTES:

   * Use of a Data Acquisition API (DAQ) that supports many different
     packet access methods including libpcap, netfilterq, IPFW, and
     afpacket.  For libpcap, version 1.0 or higher is now required.
     The DAQ library can be updated independently from Snort and is
     a separate module that Snort links to.


-- Eoin




More information about the Snort-users mailing list