Re: libdaq 3.0 nfq and afpacket
"Russ Combs \(rucombs\) via Snort-devel" <[email protected]> Mon, 29 Jul 2019 15:00:08 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <D9648207.6ED96%[email protected]> |
--===============8349539882670494792== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_D96482076ED96rucombsciscocom_" --_000_D96482076ED96rucombsciscocom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable At the moment, we aren=92t supporting CentOS. You should have success with= a more modern toolchain such as available with Fedora. Russ From: Snort-devel <[email protected]<mailto:snort-devel-b= [email protected]>> on behalf of Y M via Snort-devel <snort-devel@list= s.snort.org<mailto:[email protected]>> Reply-To: Y M <[email protected]<mailto:[email protected]>> Date: Monday, July 29, 2019 at 1:20 AM To: "[email protected]<mailto:[email protected]>" <snor= [email protected]<mailto:[email protected]>> Subject: [Snort-devel] libdaq 3.0 nfq and afpacket Hello, Trying to get nfq and afpacket to build in libdaq 3.0 but not getting anywh= ere. The nfq not building might be obvious, but not so much for afpacket. T= he dependencies appear to be met: afpacket: checking pcap.h usability... yes checking pcap.h presence... yes checking for pcap.h... yes checking for pcap_lib_version in -lpcap... yes checking linux/if_ether.h usability... yes checking linux/if_ether.h presence... yes checking for linux/if_ether.h... yes checking linux/if_packet.h usability... yes checking linux/if_packet.h presence... yes checking for linux/if_packet.h... yes checking whether PACKET_FANOUT_QM is declared... no checking whether PACKET_QDISC_BYPASS is declared... no checking whether TP_STATUS_VLAN_TPID_VALID is declared... yes checking whether IPPROTO_DIVERT is declared... no nfq: checking linux/netfilter.h usability... no checking linux/netfilter.h presence... yes configure: WARNING: linux/netfilter.h: present but cannot be compiled configure: WARNING: linux/netfilter.h: check for missing prerequisite h= eaders? configure: WARNING: linux/netfilter.h: see the Autoconf documentation configure: WARNING: linux/netfilter.h: section "Present But Cannot Be C= ompiled" configure: WARNING: linux/netfilter.h: proceeding with the compiler's resul= t configure: WARNING: ## ----------------------------------- ## configure: WARNING: ## Report this to [eradicated]@cisco.com ## configure: WARNING: ## ----------------------------------- ## checking for linux/netfilter.h... no checking linux/netfilter/nfnetlink_queue.h usability... yes checking linux/netfilter/nfnetlink_queue.h presence... yes checking for linux/netfilter/nfnetlink_queue.h... yes and finally end up with: Build AFPacket DAQ module.. : no ... Build NFQ DAQ module....... : no daq was cloned from github and built with ./configure --libdir=3D/usr/local= /lib64 on CentOS 7.6. Not sure were I went wrong. Thank you. YM --_000_D96482076ED96rucombsciscocom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <[email protected]> Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> </head> <body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; line-break:= after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Cali= bri, sans-serif;"> <div>At the moment, we aren=92t supporting CentOS. You should have su= ccess with a more modern toolchain such as available with Fedora.</div> <div><br> </div> <div>Russ</div> <div><br> </div> <span id=3D"OLK_SRC_BODY_SECTION"> <div style=3D"font-family:Calibri; font-size:11pt; text-align:left; color:b= lack; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM:= 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid;= BORDER-RIGHT: medium none; PADDING-TOP: 3pt"> <span style=3D"font-weight:bold">From: </span>Snort-devel <<a href=3D"ma= ilto:[email protected]">[email protected]= rg</a>> on behalf of Y M via Snort-devel <<a href=3D"mailto:snort-dev= [email protected]">[email protected]</a>><br> <span style=3D"font-weight:bold">Reply-To: </span>Y M <<a href=3D"mailto= :[email protected]">[email protected]</a>><br> <span style=3D"font-weight:bold">Date: </span>Monday, July 29, 2019 at 1:20= AM<br> <span style=3D"font-weight:bold">To: </span>"<a href=3D"mailto:snort-d= [email protected]">[email protected]</a>" <<a href=3D"= mailto:[email protected]">[email protected]</a>><br> <span style=3D"font-weight:bold">Subject: </span>[Snort-devel] libdaq 3.0 n= fq and afpacket<br> </div> <div><br> </div> <div><style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;marg= in-bottom:0;} </style> <div dir=3D"ltr"> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">Hello,</span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">Trying to get nfq and afpacket to build in= libdaq 3.0 but not getting anywhere. The nfq not building might be obvious= , but not so much for afpacket. The dependencies appear to be met:</span></= div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">afpacket:</span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 10pt; font-family: Consolas, Courier, monospace;"= >checking pcap.h usability... yes</span><span><br> </span> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking pcap.h presence... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking for pcap.h... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking for pcap_lib_version in -lpcap... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/if_ether.h usability... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/if_ether.h presence... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking for linux/if_ether.h... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/if_packet.h usability... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/if_packet.h presence... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking for linux/if_packet.h... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking whether PACKET_FANOUT_QM is declared... no</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking whether PACKET_QDISC_BYPASS is declared... no</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking whether TP_STATUS_VLAN_TPID_VALID is declared... yes</span><= br> </div> <span style=3D"font-size: 10pt; font-family: Consolas, Courier, monospace;"= >checking whether IPPROTO_DIVERT is declared... no</span><br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">nfq:</span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 10pt; font-family: Consolas, Courier, monospace;"= >checking linux/netfilter.h usability... no</span><span><br> </span> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/netfilter.h presence... yes</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: linux/netfilter.h: present but cannot be compiled= </span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: linux/netfilter.h: check for missin= g prerequisite headers?</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: linux/netfilter.h: see the Autoconf documentation= </span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: linux/netfilter.h: section "Pr= esent But Cannot Be Compiled"</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: linux/netfilter.h: proceeding with the compiler's= result</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: ## --------------------------------= --- ##</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: ## Report this to [eradicated]@cisc= o.com ##</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">configure: WARNING: ## --------------------------------= --- ##</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking for linux/netfilter.h... no</span><br> </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/netfilter/nfnetlink_queue.h usability... yes</span><br= > </div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">checking linux/netfilter/nfnetlink_queue.h presence... yes</span><br> </div> <span style=3D"font-size: 10pt; font-family: Consolas, Courier, monospace;"= >checking for linux/netfilter/nfnetlink_queue.h... yes</span><br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span><br> </span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">and finally end up with:</span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span><br> </span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monos= pace;">Build AFPacket DAQ module.. : no</span><span><br> </span> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">...</span></div> <div><span style=3D"font-size: 10pt; font-family: Consolas, Courier, monosp= ace;">Build NFQ DAQ module....... : no</span><br> </div> <span></span><br> </span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">daq was cloned from github and built with&= nbsp;</span><span style=3D"font-size: 10pt; font-family: Consolas, Courier,= monospace;">./configure --libdir=3D/usr/local/lib64</span><span style=3D"f= ont-size: 11pt;"> on CentOS 7.6. Not sure were I went wrong.</span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">Thank you.</span></div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <span style=3D"font-size: 11pt;">YM</span></div> </div> </div> </span> </body> </html> --_000_D96482076ED96rucombsciscocom_-- --===============8349539882670494792== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort! --===============8349539882670494792==--