How to install snort 3.1 in Ubuntu 20.10

 In my last post I installed snort3 in Ubuntu 18.04.

Now, I tried in Ubuntu 20.10 and I find more issues to fight.

When I was compiling I got an Error 2.

It is not very intuitive to know what the error is due to. I compiled it again and I catched.


Is a libdaq error, associated to a lower version.

Now, we proceed to install the last github version of libdaq:

git clone https://github.com/snort3/libdaq.git
./bootstrap
./configure
make
sudo make install

Now, we compile again snort, but...

make[2]: *** No rule to make target '/usr/lib/x86_64-linux-gnu/libdaq.so', needed by 'src/snort'.  Stop.
make[2]: Leaving directory '/tmp/snort3-3.1.0.0/build'
make[1]: *** [CMakeFiles/Makefile2:2997: src/CMakeFiles/snort.dir/all] Error 2
make[1]: Leaving directory '/tmp/snort3-3.1.0.0/build'
make: *** [Makefile:152: all] Error 2

As you see, snort is looking for libdaq.so in /usr/lib/x86_64-linux-gnu.

Now, we look for libdaq.so path with locate libdaq.so

/usr/local/lib/libdaq.so
/usr/local/lib/libdaq.so.3
/usr/local/lib/libdaq.so.3.0.0 

To fix it, you can copy or create a symbolic link to the correct path

sudo cp /usr/local/lib/libdaq.* /usr/lib/x86_64-linux-gnu/

 Now compile snort again.

If you execute snort maybe you will see the following issue:

ERROR: Could not find requested DAQ module: pcap

In this case, come back to configure all again and compile.

Enjoy! 




Comments

Popular posts from this blog

How to fix Android when developer options are not available for this user

Exception: Could not find a default OpenFlow controller in Mininet

v4l2: open /dev/video0: Permission denied