Snort
[Top] [All Lists]

Re: [Snort-users] Phil Wood Libpcap Installation Problems

To: "IT Security" <ITSEC@24hourfit.com>, snort-users-bounces@lists.sourceforge.net, snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Phil Wood Libpcap Installation Problems
From: darryl.taylor@sourcefire.com
Date: Tue, 23 Jan 2007 03:30:47 +0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
Importance: Normal
In-reply-to: <944F5D0170F4AC428E785140371686D008E37134@NOC-EXCH2.24hourfit.com>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <944F5D0170F4AC428E785140371686D008E37133@NOC-EXCH2.24hourfit.com> <944F5D0170F4AC428E785140371686D008E37134@NOC-EXCH2.24hourfit.com>
Reply-to: darryl.taylor@sourcefire.com
Sender: snort-users-bounces@lists.sourceforge.net
Sensitivity: Normal
Try ./configure --with-libpcap=/usr/local when compiling snort. If it still 
fails then the library was probably compiled statically. If that is the case, 
post back and I will tell you how to make it a shared object. I think I had 
this problem a few years ago. 

Sent from my Verizon Wireless BlackBerry  

-----Original Message-----
From: "IT Security" <ITSEC@24hourfit.com>
Date: Mon, 22 Jan 2007 17:46:59 
To:<snort-users@lists.sourceforge.net>
Subject: [Snort-users] Phil Wood Libpcap Installation Problems

I'm trying to get Phil Wood's modified libpcap working on my Snort 2.6.1
sensor, but have run into some difficulties and hoping that someone out
there can help.

I've downloaded and extracted libpcap-0.9.20060417.tar.gz.  I then run:

   ./configure
   make
   make install

I then downloaded and extracted snort-2.6.1.1.tar.gz.  I then run:

   ./configure
   make

That's where it blows up.  Here is the error:

<snip>

checking for pcap_datalink in -lpcap... no

   ERROR!  Libpcap library/headers not found, go get it from
   http://www.tcpdump.org
   or use the --with-libpcap-* options, if you have it installed
   in unusual place

</snip>

Any ideas why the headers would be missing?  Header files are identified
with the .h extension correct?  Where are these supposed to reside on
the system?

I'm running CentOS 4 with 2.6.9-42.0.3.EL kernel.

Thanks in advance.

- Jesse

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>