Home page logo

snort logo Snort mailing list archives

Re: DAQ and libpcap 1.1.1 vs 1.0.0
From: vincent () cojot name
Date: Mon, 8 Nov 2010 18:05:01 +0100 (CET)

Hi Russ,

On Mon, 8 Nov 2010, Russ Combs wrote:

I don't seem to have a --disable-remote for my libpcap 1.1.1 configure.

What exactly does that do?

# ./configure --help|grep remot
   --disable-remote        disable remote capture capabilities

That's all I know. I don't know yet why it causes daq to crash snort when 
that support is compiled in. libpcap-1.0.0 didn't have these 'remote 
capture' features (I think).

I'm glad you've got a workaround but would like to figure out what the issue is and fix the DAQ if needed.

Yes, so would I. Now that I got the binary distribution 'stabilized' 
enough, I can spend more time trying to figure out why it crashes under 
RHEL5.5 when 'remote capture' is enabled inside libpcap 1.1.1.



The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]