[Snort-users] snort_dynamicpreprocessor

Sam Johnson Sam.Johnson at flagshipcredit.com
Tue Sep 18 13:25:32 EDT 2018


James was able to help me figure out the issue.
Had to symlink daq-modules-config to /bin since I was running under root. Cleared the issue right up and was able to make Snort.

Sam Johnson


-----Original Message-----
From: James Lay <jlay at slave-tothe-box.net>
Sent: Tuesday, September 18, 2018 1:22 PM
To: Sam Johnson <Sam.Johnson at flagshipcredit.com>
Subject: Re: [Snort-users] snort_dynamicpreprocessor

Excellent...might wanna shoot that info out to the list so other folks with the same question will get the answer :)  And FWIW the reason is that /usr/local/bin isn't in root's path...kinda dumb but there it is.

James

On 2018-09-18 11:20, Sam Johnson wrote:
> I am under root. Also, I checked my other box and it also had the
> daq-modules-config under /bin. So I symlinked it to there from
> /usr/local/bin and was able to successfully run ./configure! Thanks
> for the help!
>
> Sam Johnson
>
> -----Original Message-----
> From: James Lay <jlay at slave-tothe-box.net>
> Sent: Tuesday, September 18, 2018 1:19 PM
> To: Sam Johnson <Sam.Johnson at flagshipcredit.com>
> Subject: Re: [Snort-users] snort_dynamicpreprocessor
>
> Try and run it......and are you ./configuring as sudo or root by
> chance?
>
> On 2018-09-18 11:15, Sam Johnson wrote:
>> Daq-config-modules is located at /usr/local/bin
>>
>> Sam Johnson
>>
>>
>> -----Original Message-----
>> From: James Lay <jlay at slave-tothe-box.net>
>> Sent: Tuesday, September 18, 2018 1:15 PM
>> To: Sam Johnson <Sam.Johnson at flagshipcredit.com>
>> Subject: Re: [Snort-users] snort_dynamicpreprocessor
>>
>> Where is the file currently at?
>>
>>
>>
>> On 2018-09-18 11:13, Sam Johnson wrote:
>>> Hi James,
>>>
>>> Where would I symlink that daq-modules-config to?
>>>
>>> Thanks,
>>>
>>> Sam Johnson
>>>
>>>
>>> -----Original Message-----
>>> From: Snort-users <snort-users-bounces at lists.snort.org> On Behalf Of
>>> James Lay via Snort-users
>>> Sent: Tuesday, September 18, 2018 12:11 PM
>>> To: snort-users at lists.snort.org
>>> Subject: Re: [Snort-users] snort_dynamicpreprocessor
>>>
>>> Symlink the command:
>>>
>>> /usr/local/bin/daq-modules-config
>>>
>>> James
>>>
>>> On 2018-09-18 09:56, Sam Johnson wrote:
>>>> Okay so weirdly enough… I just went installed on a second machine
>>>> (have about 4 or so to do altogether), and I’m now getting the same
>>>> exact error:
>>>>
>>>> ./configure: line 16264: daq-modules-config: command not found
>>>>
>>>> checking for daq_load_modules in -ldaq_static... no
>>>>
>>>>    ERROR!  daq_static library not found, go get it from
>>>>
>>>>    http://www.snort.org/ [1].
>>>>
>>>> I added in the –with-daq-libraries and –with-daq-includes but it
>>>> still doesn’t want to find daq. I made daq, installed the RPM
>>>> package of snort… nothing seems to work. I see all the daq
>>>> libraries in /usr/local/lib and /usr/local/include. I don’t get why
>>>> this wouldn’t work. Any thoughts?
>>>>
>>>> FROM: Carter Waxman (cwaxman) <cwaxman at cisco.com>
>>>> SENT: Wednesday, September 12, 2018 9:37 AM
>>>> TO: Sam Johnson <Sam.Johnson at flagshipcredit.com>;
>>>> snort-users at lists.snort.org
>>>> SUBJECT: Re: [Snort-users] snort_dynamicpreprocessor
>>>>
>>>>  * For static DAQ, use ./configure
>>>> --with-daq-libraries=/usr/local/lib
>>>> –with-daq-includes=/usr/local/include and adjust those paths
>>>> accordingly, then run make clean and make. ldconfig is for dynamic
>>>> libraries.
>>>>
>>>>  * List the contents of the package / rpm and ensure that the paths
>>>> in snort.conf match the dynamic paths. The config should be
>>>> rewritten automatically if it’s our package or the packager used
>>>> our spec file.
>>>>
>>>> Thanks,
>>>>
>>>> Carter
>>>>
>>>> FROM: Snort-users <snort-users-bounces at lists.snort.org> on behalf
>>>> of Sam Johnson <Sam.Johnson at flagshipcredit.com>
>>>> DATE: Tuesday, September 11, 2018 at 5:01 PM
>>>> TO: "snort-users at lists.snort.org" <snort-users at lists.snort.org>
>>>> SUBJECT: [Snort-users] snort_dynamicpreprocessor
>>>>
>>>> Hello all,
>>>>
>>>> I was able to manually compile snort just fine on my test system.
>>>> Went to do it on prod and got the error about not being able to
>>>> find the daq static libraries (daq was compiled and installed
>>>> successfully and I added /usr/local/lib to ldconfig). So I decided
>>>> to use the ‘yum install’ method. Which worked without any issue.
>>>> When I went to test run snort I got the error that it was not able
>>>> to find the snort_dynamicpreprocessor. Took a look and it is
>>>> located at /usr/local/lib/ on my test machine, but I do not have it
>>>> at all on my prod machine (which again was installed using yum install).
>>>>
>>>> At first I started going through and commenting out the lines that
>>>> were erroring out for the dynamicpreprocessor, but I’d rather just
>>>> get that installed and have it if needed. Can anyone tell me how to
>>>> actually get it installed? Should I just recompile manually? Or
>>>> will that mess up the current snort install?
>>>>
>>>> Thanks for your time!
>>>>
>>>> Sam Johnson
>>>>
>>>> The information transmitted via this email is intended only for the
>>>> person or entity to which it is addressed and may contain
>>>> confidential and/or privileged material. Any review,
>>>> retransmission, dissemination or other use of, or taking of any
>>>> action in reliance upon this information by persons or entities
>>>> other than the intended recipient is prohibited. If you receive
>>>> this in error, please contact the sender and delete the material from any computer.
>>>>
>>>> The information transmitted via this email is intended only for the
>>>> person or entity to which it is addressed and may contain
>>>> confidential and/or privileged material. Any review,
>>>> retransmission, dissemination or other use of, or taking of any
>>>> action in reliance upon this information by persons or entities
>>>> other than the intended recipient is prohibited. If you receive
>>>> this in error, please contact the sender and delete the material
>>>> from any computer. The information transmitted via this email is
>>>> intended only for the person or entity to which it is addressed and
>>>> may contain confidential and/or privileged material.
>>>> Any review, retransmission, dissemination or other use of, or
>>>> taking of any action in reliance upon this information by persons
>>>> or entities other than the intended recipient is prohibited. If you
>>>> receive this in error, please contact the sender and delete the
>>>> material from any computer.
>>>>
>>>> Links:
>>>> ------
>>>> [1] http://www.snort.org/
>>>> _______________________________________________
>>>> Snort-users mailing list
>>>> Snort-users at lists.snort.org
>>>> Go to this URL to change user options or unsubscribe:
>>>> https://lists.snort.org/mailman/listinfo/snort-users
>>>>
>>>> To unsubscribe, send an email to:
>>>> snort-users-leave at lists.snort.org
>>>>
>>>> Please visit http://blog.snort.org to stay current on all the
>>>> latest Snort news!
>>>>
>>>> Please follow these rules:
>>>> https://snort.org/faq/what-is-the-mailing-list-etiquette
>>> _______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.snort.org
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.snort.org/mailman/listinfo/snort-users
>>>
>>> To unsubscribe, send an email to:
>>> snort-users-leave at lists.snort.org
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest
>>> Snort news!
>>>
>>> Please follow these rules:
>>> https://snort.org/faq/what-is-the-mailing-list-etiquette
>>> The information transmitted via this email is intended only for the
>>> person or entity to which it is addressed and may contain
>>> confidential and/or privileged material. Any review, retransmission,
>>> dissemination or other use of, or taking of any action in reliance
>>> upon this information by persons or entities other than the intended
>>> recipient is prohibited. If you receive this in error, please
>>> contact the sender and delete the material from any computer.
>> The information transmitted via this email is intended only for the
>> person or entity to which it is addressed and may contain
>> confidential and/or privileged material. Any review, retransmission,
>> dissemination or other use of, or taking of any action in reliance
>> upon this information by persons or entities other than the intended
>> recipient is prohibited. If you receive this in error, please contact
>> the sender and delete the material from any computer.
> The information transmitted via this email is intended only for the
> person or entity to which it is addressed and may contain confidential
> and/or privileged material. Any review, retransmission, dissemination
> or other use of, or taking of any action in reliance upon this
> information by persons or entities other than the intended recipient
> is prohibited. If you receive this in error, please contact the sender
> and delete the material from any computer.
The information transmitted via this email is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please contact the sender and delete the material from any computer.


More information about the Snort-users mailing list