[Snort-users] DAQ w/ Snort 2.9 on OpenBSD 4.7 AMD64

Randal T. Rioux randy at ...13561...
Sun Oct 10 05:29:08 EDT 2010

My turn.

First, DAQ looks awesome. I just don't like being forced to compile it
into Snort if I don't plan on using it. I'll get over that.

Second, ERROR!

The latest dependencies are installed on this box (within
/usr/local/lib|includes). This is the ./configure line I'm using for Snort:

./configure --enable-reload --enable-ppm --enable-zlib \
            --enable-perfprofiling \
            --with-libpcap-includes=/usr/local/include \
            --with-libpcap-libraries=/usr/local/lib \
            --with-dnet-includes=/usr/local/include \
            --with-dnet-libraries=/usr/local/lib \
            --with-daq-includes=/usr/local/include \

...and this is the error it throws. Any suggestions?:

<blah blah blah>
checking for pcap_datalink in -lpcap... yes
checking for pcap_lex_destroy... no
checking for pcap_lib_version... yes
checking pcre.h usability... yes
checking pcre.h presence... yes
checking for pcre.h... yes
checking for pcre_compile in -lpcre... yes
checking for libpcre version 6.0 or greater... yes
checking dnet.h usability... yes
checking dnet.h presence... yes
checking for dnet.h... yes
checking for eth_set in -ldnet... yes
checking for dlsym in -ldl... no
checking for dlsym in -lc... yes
checking for daq_load_modules in -ldaq_static... no

   ERROR!  daq_static library not found, go get it from

More information about the Snort-users mailing list