[Snort-users] Snort does not capture with PF_RINF DNA

Ivan Petrov ipetrov80 at ...131...
Wed Aug 20 09:46:24 EDT 2014


I'm trying to run Snort with Pf_ring DNA driver. But i'm stuck with a problem.

sudo /usr/sbin/snort --daq-dir=/usr/local/lib/daq --daq-list
/usr/local/lib/daq/daq_pfring.so: dlopen: /usr/local/lib/libpfring.so: undefined symbol: numa_parse_nodestring
Available DAQ modules:
pcap(v3): readback live multi unpriv
afpacket(v5): live inline multi unpriv
ipfw(v3): live inline multi unpriv
dump(v2): readback live inline multi unpriv

libpfring is not in the daq list. Any ideas?

Starting snort: /usr/local/lib/daq/daq_pfring.so: dlopen: /usr/local/lib/libpfring.so: undefined symbol: numa_parse_nodestring
My daemon child 20303 lives...
Daemon parent exiting (0)
                                                           [  OK  ]

Daq 2.0.2
PF_RING 6.0.1
DNA driver e1000e

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140820/527cf340/attachment.html>

More information about the Snort-users mailing list