Re: libdaq 3.0 nfq and afpacket
Y M via Snort-devel <[email protected]> Mon, 29 Jul 2019 16:53:51 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <MN2PR17MB3360575186AD8F24DDED1E3AA8DD0@MN2PR17MB3360.namprd17.prod.outlook.com> |
--===============3036850983848955409== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_MN2PR17MB3360575186AD8F24DDED1E3AA8DD0MN2PR17MB3360namp_" --_000_MN2PR17MB3360575186AD8F24DDED1E3AA8DD0MN2PR17MB3360namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Thanks, Russ. I was in process of updating the Snort 3 on CentOS guide, but= I will hold off until CentOS is supported or migrate the guide to Fedora a= ltogether. YM ________________________________ From: Russ Combs (rucombs) <[email protected]> Sent: Monday, July 29, 2019 6:00 PM To: Y M <[email protected]>; [email protected] <snort-devel@lists= .snort.org> Subject: Re: [Snort-devel] libdaq 3.0 nfq and afpacket At the moment, we aren=92t supporting CentOS. You should have success with= a more modern toolchain such as available with Fedora. Russ From: Snort-devel <[email protected]<mailto:snort-devel-b= [email protected]>> on behalf of Y M via Snort-devel <snort-devel@list= s.snort.org<mailto:[email protected]>> Reply-To: Y M <[email protected]<mailto:[email protected]>> Date: Monday, July 29, 2019 at 1:20 AM To: "[email protected]<mailto:[email protected]>" <snor= [email protected]<mailto:[email protected]>> Subject: [Snort-devel] libdaq 3.0 nfq and afpacket Hello, Trying to get nfq and afpacket to build in libdaq 3.0 but not getting anywh= ere. The nfq not building might be obvious, but not so much for afpacket. T= he dependencies appear to be met: afpacket: checking pcap.h usability... yes checking pcap.h presence... yes checking for pcap.h... yes checking for pcap_lib_version in -lpcap... yes checking linux/if_ether.h usability... yes checking linux/if_ether.h presence... yes checking for linux/if_ether.h... yes checking linux/if_packet.h usability... yes checking linux/if_packet.h presence... yes checking for linux/if_packet.h... yes checking whether PACKET_FANOUT_QM is declared... no checking whether PACKET_QDISC_BYPASS is declared... no checking whether TP_STATUS_VLAN_TPID_VALID is declared... yes checking whether IPPROTO_DIVERT is declared... no nfq: checking linux/netfilter.h usability... no checking linux/netfilter.h presence... yes configure: WARNING: linux/netfilter.h: present but cannot be compiled configure: WARNING: linux/netfilter.h: check for missing prerequisite h= eaders? configure: WARNING: linux/netfilter.h: see the Autoconf documentation configure: WARNING: linux/netfilter.h: section "Present But Cannot Be C= ompiled" configure: WARNING: linux/netfilter.h: proceeding with the compiler's resul= t configure: WARNING: ## ----------------------------------- ## configure: WARNING: ## Report this to [eradicated]@cisco.com ## configure: WARNING: ## ----------------------------------- ## checking for linux/netfilter.h... no checking linux/netfilter/nfnetlink_queue.h usability... yes checking linux/netfilter/nfnetlink_queue.h presence... yes checking for linux/netfilter/nfnetlink_queue.h... yes and finally end up with: Build AFPacket DAQ module.. : no ... Build NFQ DAQ module....... : no daq was cloned from github and built with ./configure --libdir=3D/usr/local= /lib64 on CentOS 7.6. Not sure were I went wrong. Thank you. YM --_000_MN2PR17MB3360575186AD8F24DDED1E3AA8DD0MN2PR17MB3360namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> Thanks, Russ. I was in process of updating the Snort 3 on CentOS guide, but= I will hold off until CentOS is supported or migrate the guide to Fedora a= ltogether.</div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0);"> YM</div> <div id=3D"appendonsend"></div> <hr style=3D"display:inline-block;width:98%" tabindex=3D"-1"> <div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" st= yle=3D"font-size:11pt" color=3D"#000000"><b>From:</b> Russ Combs (rucombs) = <[email protected]><br> <b>Sent:</b> Monday, July 29, 2019 6:00 PM<br> <b>To:</b> Y M <[email protected]>; [email protected] <s= [email protected]><br> <b>Subject:</b> Re: [Snort-devel] libdaq 3.0 nfq and afpacket</font> <div> </div> </div> <div style=3D"word-wrap:break-word; line-break:after-white-space; color:rgb= (0,0,0); font-size:14px; font-family:Calibri,sans-serif"> <div>At the moment, we aren=92t supporting CentOS. You should have su= ccess with a more modern toolchain such as available with Fedora.</div> <div><br> </div> <div>Russ</div> <div><br> </div> <span id=3D"OLK_SRC_BODY_SECTION"> <div style=3D"font-family:Calibri; font-size:11pt; text-align:left; color:b= lack; border-bottom:medium none; border-left:medium none; padding-bottom:0i= n; padding-left:0in; padding-right:0in; border-top:#b5c4df 1pt solid; borde= r-right:medium none; padding-top:3pt"> <span style=3D"font-weight:bold">From: </span>Snort-devel <<a href=3D"ma= ilto:[email protected]">[email protected]= rg</a>> on behalf of Y M via Snort-devel <<a href=3D"mailto:snort-dev= [email protected]">[email protected]</a>><br> <span style=3D"font-weight:bold">Reply-To: </span>Y M <<a href=3D"mailto= :[email protected]">[email protected]</a>><br> <span style=3D"font-weight:bold">Date: </span>Monday, July 29, 2019 at 1:20= AM<br> <span style=3D"font-weight:bold">To: </span>"<a href=3D"mailto:snort-d= [email protected]">[email protected]</a>" <<a href=3D"= mailto:[email protected]">[email protected]</a>><br> <span style=3D"font-weight:bold">Subject: </span>[Snort-devel] libdaq 3.0 n= fq and afpacket<br> </div> <div><br> </div> <div><style type=3D"text/css" style=3D"display:none"> <!-- p {margin-top:0; margin-bottom:0} --> </style> <div dir=3D"ltr"> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">Hello,</span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">Trying to get nfq and afpacket to build in l= ibdaq 3.0 but not getting anywhere. The nfq not building might be obvious, = but not so much for afpacket. The dependencies appear to be met:</span></di= v> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">afpacket:</span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace">chec= king pcap.h usability... yes</span><span><br> </span> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking pcap.h presence... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking for pcap.h... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking for pcap_lib_version in -lpcap... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/if_ether.h usability... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/if_ether.h presence... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking for linux/if_ether.h... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/if_packet.h usability... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/if_packet.h presence... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking for linux/if_packet.h... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking whether PACKET_FANOUT_QM is declared... no</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking whether PACKET_QDISC_BYPASS is declared... no</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking whether TP_STATUS_VLAN_TPID_VALID is declared... yes</span><br> </div> <span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace">chec= king whether IPPROTO_DIVERT is declared... no</span><br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">nfq:</span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace">chec= king linux/netfilter.h usability... no</span><span><br> </span> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/netfilter.h presence... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: linux/netfilter.h: present but cannot be compiled</spa= n><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: linux/netfilter.h: check for missing pre= requisite headers?</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: linux/netfilter.h: see the Autoconf documentation</spa= n><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: linux/netfilter.h: section "Present= But Cannot Be Compiled"</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: linux/netfilter.h: proceeding with the compiler's resu= lt</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: ## ----------------------------------- #= #</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: ## Report this to [eradicated]@cisco.com= ##</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >configure: WARNING: ## ----------------------------------- #= #</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking for linux/netfilter.h... no</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/netfilter/nfnetlink_queue.h usability... yes</span><br> </div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >checking linux/netfilter/nfnetlink_queue.h presence... yes</span><br> </div> <span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace">chec= king for linux/netfilter/nfnetlink_queue.h... yes</span><br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span><br> </span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">and finally end up with:</span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span><br> </span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace= ">Build AFPacket DAQ module.. : no</span><span><br> </span> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >...</span></div> <div><span style=3D"font-size:10pt; font-family:Consolas,Courier,monospace"= >Build NFQ DAQ module....... : no</span><br> </div> <span></span><br> </span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">daq was cloned from github and built with&nb= sp;</span><span style=3D"font-size:10pt; font-family:Consolas,Courier,monos= pace">./configure --libdir=3D/usr/local/lib64</span><span style=3D"font-siz= e:11pt"> on CentOS 7.6. Not sure were I went wrong.</span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">Thank you.</span></div> <div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col= or:rgb(0,0,0)"> <span style=3D"font-size:11pt">YM</span></div> </div> </div> </span></div> </body> </html> --_000_MN2PR17MB3360575186AD8F24DDED1E3AA8DD0MN2PR17MB3360namp_-- --===============3036850983848955409== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort! --===============3036850983848955409==--