How to install snort 3.1 in Ubuntu 20.10

 In my last post I installed snort3 in Ubuntu 18.04.

Now, I tried in Ubuntu 20.10 and I find more issues to fight.

When I was compiling I got an Error 2.

It is not very intuitive to know what the error is due to. I compiled it again and I catched.


Is a libdaq error, associated to a lower version.

Now, we proceed to install the last github version of libdaq:

git clone https://github.com/snort3/libdaq.git
./bootstrap
./configure
make
sudo make install

Now, we compile again snort, but...

make[2]: *** No rule to make target '/usr/lib/x86_64-linux-gnu/libdaq.so', needed by 'src/snort'.  Stop.
make[2]: Leaving directory '/tmp/snort3-3.1.0.0/build'
make[1]: *** [CMakeFiles/Makefile2:2997: src/CMakeFiles/snort.dir/all] Error 2
make[1]: Leaving directory '/tmp/snort3-3.1.0.0/build'
make: *** [Makefile:152: all] Error 2

As you see, snort is looking for libdaq.so in /usr/lib/x86_64-linux-gnu.

Now, we look for libdaq.so path with locate libdaq.so

/usr/local/lib/libdaq.so
/usr/local/lib/libdaq.so.3
/usr/local/lib/libdaq.so.3.0.0 

To fix it, you can copy or create a symbolic link to the correct path

sudo cp /usr/local/lib/libdaq.* /usr/lib/x86_64-linux-gnu/

 Now compile snort again.

If you execute snort maybe you will see the following issue:

ERROR: Could not find requested DAQ module: pcap

In this case, come back to configure all again and compile.

Enjoy! 




Comments

Popular posts from this blog

Exception: Could not find a default OpenFlow controller in Mininet

How to fix Android when developer options are not available for this user

Webcam streaming throught VLC with YUY2 compatibility