Snort mailing list archives
Can't find nfq DAQ
From: James Lay <jlay () slave-tothe-box net>
Date: Thu, 06 Mar 2014 18:01:19 -0700
Topic says it....so here's the setup:
Slackware 13.1 x64
compiled:
libmnl-1.0.3
libnetfilter_queue-1.0.2
libnfnetlink-1.0.1
from source all with:
./configure --prefix=/usr --libdir=/usr/lib64 --enable-static=no
snort --daq-dir /usr/local/lib/daq --daq-list
Available DAQ modules:
nfq(v7): live inline multi
pcap(v3): readback live multi unpriv
ipq(v6): live inline multi
ipfw(v3): live inline multi unpriv
dump(v2): readback live inline multi unpriv
afpacket(v5): live inline multi unpriv
but for the life of me it just doesn't load up. Misc info:
ldd `which snort`
linux-vdso.so.1 => (0x00007fff8c151000)
libcrypto.so.0 => /lib64/libcrypto.so.0 (0x00007fb2a7a11000)
libpcre.so.0 => /usr/lib64/libpcre.so.0 (0x00007fb2a77ec000)
libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fb2a75d2000)
libuuid.so.1 => /lib64/libuuid.so.1 (0x00007fb2a73cf000)
libm.so.6 => /lib64/libm.so.6 (0x00007fb2a714c000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007fb2a6f48000)
libipq.so.0 => /usr/lib64/libipq.so.0 (0x00007fb2a6d46000)
libnetfilter_queue.so.1 => /usr/lib64/libnetfilter_queue.so.1
(0x00007fb2a6b40000)
libnfnetlink.so.0 => /usr/lib64/libnfnetlink.so.0 (0x00007fb2a693a000)
libmnl.so.0 => /usr/lib64/libmnl.so.0 (0x00007fb2a6736000)
libsfbpf.so.0 => /usr/local/lib/libsfbpf.so.0 (0x00007fb2a6511000)
libpcap.so.1 => /usr/lib64/libpcap.so.1 (0x00007fb2a62dd000)
libdnet.1 => /lib64/libdnet.1 (0x00007fb2a60cb000)
libz.so.1 => /usr/lib64/libz.so.1 (0x00007fb2a5eb7000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fb2a5c9a000)
libc.so.6 => /lib64/libc.so.6 (0x00007fb2a5925000)
/lib64/ld-linux-x86-64.so.2 (0x00007fb2a7d97000)
Any hints would be appreciated...thanks!
James
Attachment:
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce. With Perforce, you get hassle-free workflows. Merge that actually works. Faster operations. Version large binaries. Built-in WAN optimization and the freedom to use Git, Perforce or both. Make the move to Perforce. http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Can't find nfq DAQ James Lay (Mar 06)
- Re: Can't find nfq DAQ James Lay (Mar 07)
