Building standard DAQ on Ubuntu 12 LTS

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

Ultimately I'm trying to build Snort against PF_RING on
Ubuntu 12 LTS - 64-bit.

I first thought I'd try and build the standard DAQ and then a normal
Snort on the new system.

I've built a PF_RING-enabled libpcap, which is in /usr/local/lib.

Some other apps (httpry/passivends) are linked against it and run fine.

The standard package (libpcap-dev) is not installed.

Building DAQ 0.6.2, I try:

./configure --with-libpcap-includes=/usr/local/include
- --with-libpcap-libraries=/usr/local/lib

In the output:

checking pcap.h usability... yes
checking pcap.h presence... yes
checking for pcap.h... yes
checking for pcap_lib_version in -lpcap... no

checking for pcap.h... (cached) yes
checking for pcap_lib_version... checking for pcap_lib_version in
- -lpcap... (cached) no

    ERROR!  Libpcap library version >= 1.0.0 not found.
    Get it from http://www.tcpdump.org

If I install the standard libpcap-dev and obviously drop the flags to
configure, configure completes.

In /usr/lib/x86_64-linux-gnu I have:
libpcap.a
libpcap.so -> libpcap.so.0.8
libpcap.so.0.8 -> libpcap.so.1.1.1
libpcap.so.1.1.1

In /usr/local/lib:
libpcap.a
libpcap.so -> libpcap.so.1
libcap.so.1 -> libpcap.so.1.1.1
libpcap.so.1.1.1

/usr/local/lib is included in the LD path as it is referenced in
/etc/ld.so.conf.d/

Am I doing something seriously dumb here?

Thanks.

- -- 
Peter Bates
Senior Computer Security Officer    Phone: +44(0)2076792049
Information Services Division       Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP1yd7AAoJELhVoVpEMS6RGYMH/162hvfSvSykY99L3ZLOL4nW
iatpmcZRo2+FqylgFWLe1gg/d4atEVhGJxJTqg/NaKy6ULAU9TbCDzz5ivBc8kKZ
zNtiZd+wizLjYQ6QBtgpt2ZbBk8ausrwqen8mwJRVZ9huRh5zZHq256601APZMLn
xN5ec6hxWzV9g5v99LjuGj42X28jJBMhXfEZd59JAxOkIUmdGHJK1px8nr5VH0di
N9HOa1ZiMn7bYpxjqAViomDDZ9VPRbKlHjaROhRTMWyG5UrKcpsIg5NDZrBGpnnn
tpSE4xSdTbtmZXynSGVNDz3AMEhx2lgM7rZBCUeSlWcRl6jcmUk5DzjAisj3wUE=
=2z/v
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!