<div dir="ltr"><div><div>Hi,<br><br></div>CentOS7, with the snort/daq build from I'm getting Segmentation fault:<br><br># cat /etc/yum.repos.d/copr-marcindulak-snort.repo<br>[copr-marcindulak-snort]<br>name=copr-marcindulak-snort<br>baseurl=<a href="https://copr-be.cloud.fedoraproject.org/results/marcindulak/snort/epel-$releasever-$basearch">https://copr-be.cloud.fedoraproject.org/results/marcindulak/snort/epel-$releasever-$basearch</a><br>enabled=0<br>gpgcheck=1<br>gpgkey=<a href="https://copr-be.cloud.fedoraproject.org/results/marcindulak/snort/pubkey.gpg">https://copr-be.cloud.fedoraproject.org/results/marcindulak/snort/pubkey.gpg</a><br><br># yum -y install snort --enablerepo=copr-marcindulak-snort<br># SNORT_LUA_PATH=/etc/snort LUA_PATH=/usr/include/snort/lua/?.lua snort --daq-dir /usr/lib64/daq --daq nfq -Q -l /var/log/snort -c /etc/snort/snort.lua<br>--------------------------------------------------<br>o")~   Snort++ 3.0.0-a4-225<br>--------------------------------------------------<br>Loading /etc/snort/snort.lua:<br>    ssh<br>    rpc_decode<br>    pop<br>    stream_user<br>    stream_tcp<br>    smtp<br>    ssl<br>    gtp_inspect<br>    stream_ip<br>    appid<br>    stream_icmp<br>    reputation<br>    stream_udp<br>    file_id<br>    back_orifice<br>    classifications<br>    port_scan<br>    dnp3<br>    ftp_data<br>    ftp_server<br>    telnet<br>    ftp_client<br>    http_inspect<br>    stream<br>    references<br>    arp_spoof<br>    sip<br>    wizard<br>    dns<br>    imap<br>    stream_file<br>Finished /etc/snort/snort.lua.<br>--------------------------------------------------<br>nfq DAQ configured to inline.<br>Commencing packet processing<br>Segmentation fault<br><br>The goal is to have snort inline with nfqueue, but I'm not doing anything about iptables yet.<br></div><div>Only the commands executed above.<br></div><div><br>Please be careful: this snort build has broken scriptlets, I have not fixed them yet.</div><div>The yum repo contains debuginfo so you should be able to debug snort if needed.<br></div><div><br></div>Marcin<br></div>