Re: daq-2.2 with snort-2?

[Michael Altizer <mialtize () cisco com>]

On 11/12/2016 09:56 AM, Marcin Dulak wrote:
> Hi,
>
> I see that daq-2.0 and daq-2.2 cannot coexist on the same system.
> Are there plans to support daq-2.2 https://github.com/Xiche/libdaq 
> with snort-2?
> Are there planned releases of daq-2.0 https://github.com/jasonish/daq?
>
> Another question: is there an advantage from building snort against 
> static daq libraries instead of so?
>
> Regards,
>
> Marcin

Please continue to use the latest version of LibDAQ listed under the 
Snort section of snort.org/downloads (2.0.6.tar.gz) when compiling Snort 
2.x for now.  LibDAQ 2.2 will be supported by Snort 2.9.9, but I would 
still suggest using 2.0.6 for production builds as the newer LibDAQ 
versions are only being internally tested with Snort++ at this time.  
There are currently no plans to make the old and new versions of LibDAQ 
coexist in the normal way, but you are free to install them into 
non-standard paths to avoid conflicts if you really need both.

 From a distribution point of view, there is no real advantage in 
statically linking LibDAQ and DAQ module instead Snort except to 
simplify/eliminate library packages and dependencies.  The main benefit 
it imparts is the ability to have a self-contained Snort binary without 
the additional LibDAQ, LibSFBPF, and DAQ module dependencies.  This 
provides the ability to omit the --daq-dir option when using a DAQ 
module that has been compiled in.  (Some people find it tedious to have 
to provide Snort with a DAQ module directory for it to be used in any way.)

FYI - I do not know what https://github.com/jasonish/daq is, but it is 
not upstream for LibDAQ - it looks like they were just importing and 
updating from the released tarballs.  LibDAQ upstream is not technically 
https://github.com/Xiche/libdaq, but that repository is kept very 
up-to-date (up to and including changes that have not yet been 
officially released).  Always get the official upstream tarballs from 
snort.org.

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!