Problem with make/install snort

Discussion in 'HOWTO-Related Questions' started by BruceWilkinson, Dec 27, 2006.

  1. BruceWilkinson

    BruceWilkinson New Member

    'm working through Intrusion Detection With BASE And Snort tutorial (http://www.howtoforge.com/intrusion_detection_base_snort_p3) on Ubuntu. I ran into a problem with make/install snort at ./configure --enable-dynamicplugin --with-mysql (page 3). I get the following error:

    checking for pcap_datalink in -lpcap... no

    ERROR! Libpcap library/headers not found, go get it from
    http://www.tcpdump.org
    or use the --with-libpcap-* options, if you have it installed
    in unusual place

    LIBPCAP was installed following the directions in the tutorial. Relative to snort, it's at ../libpcap-2006.12.07.

    Can anyone help?

    Bruce
     
  2. falko

    falko Super Moderator ISPConfig Developer

    Did you get any errors when you compiled LIBPCAP?
     
  3. BruceWilkinson

    BruceWilkinson New Member

    make/install LIBPCAP fine

    There is another thread about the problems I had with make/install LIBPCAP. See "lex is insufficient to compile libpcap" from 12/21. Once I installed flex & bison, I was able to build LIBPCAP.
     
  4. falko

    falko Super Moderator ISPConfig Developer

    So it's installed now? Did you try to compile Snort again?
     
  5. BruceWilkinson

    BruceWilkinson New Member

    LIBPCAP built clean

    The post about snort not building came after building LIBPCAP. The snort build couldn't find the LIBPCAP library/headers.

    I can post more of the output shown in the terminal window if it will help.

    Bruce
     
  6. falko

    falko Super Moderator ISPConfig Developer

    What's the output of
    Code:
    ./configure --help
    in the Snort directory? What are the --with-libpcap... options that it displays?
     

Share This Page