Re: Snort Install

["Al Lewis (allewi)" <allewi () cisco com>]

Hello,

Please see the DAQ README which is where the info below was taken from:

Notes on iptables
=================

These notes are just a quick reminder that you need to set up iptables to use
the IPQ or NFQ DAQs.  Doing so may cause problems with your network so tread
carefully.  The examples below are intentionally incomplete so please read the
related documentation first.



FreeBSD
-------
In FreeBSD 10.0, netmap has been integrated into the core OS.  In order to use
it, you must recompile your kernel with the line

    device netmap

added to your kernel config.

Linux
-----
You will need to download the netmap source code from the project's repository:

    https://code.google.com/p/netmap/

Follow the instructions on the project's homepage for compiling and installing
the code:

    http://info.iet.unipi.it/~luigi/netmap/





Hope this helps!


Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi () cisco com

From: Leon Vergottini [mailto:leonv () cornerstone ac za]
Sent: Thursday, April 02, 2015 3:02 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort Install

Dear Community

I am trying to install the latest version of Snort on a Centos 6 minimal installing.  I have followed the installation 
Guide (https://www.snort.org/documents/snort-2-9-7-x-on-centos-6-x-and-7-x) to the teeth.  However, every time I 
configure DAQ, I get the following out

Build AFPacket DAQ module.. : yes
Build Dump DAQ module...... : yes
Build IPFW DAQ module...... : yes
Build IPQ DAQ module....... : no
Build NFQ DAQ module....... : yes
Build PCAP DAQ module...... : yes
Build netmap DAQ module...... : no

IPQ and netmap is not configured.  What do I need to install to enable these modules?  I have Googled and look at 
Debain based installations as well to try and figure out what I am missing.

Kind Regards
Leon

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!