How to install snort 3.1 in Ubuntu 20.10
In my last post I installed snort3 in Ubuntu 18.04.
Now, I tried in Ubuntu 20.10 and I find more issues to fight.
When I was compiling I got an Error 2.
It is not very intuitive to know what the error is due to. I compiled it again and I catched.
Is a libdaq error, associated to a lower version.
Now, we proceed to install the last github version of libdaq:
git clone https://github.com/snort3/libdaq.git
./bootstrap
./configure
make
sudo make install
Now, we compile again snort, but...
make[2]: *** No rule to make target '/usr/lib/x86_64-linux-gnu/libdaq.so', needed by 'src/snort'. Stop.
make[2]: Leaving directory '/tmp/snort3-3.1.0.0/build'
make[1]: *** [CMakeFiles/Makefile2:2997: src/CMakeFiles/snort.dir/all] Error 2
make[1]: Leaving directory '/tmp/snort3-3.1.0.0/build'
make: *** [Makefile:152: all] Error 2
As you see, snort is looking for libdaq.so in /usr/lib/x86_64-linux-gnu.
Now, we look for libdaq.so path with locate libdaq.so
/usr/local/lib/libdaq.so
/usr/local/lib/libdaq.so.3
/usr/local/lib/libdaq.so.3.0.0
To fix it, you can copy or create a symbolic link to the correct path
sudo cp /usr/local/lib/libdaq.* /usr/lib/x86_64-linux-gnu/
Now compile snort again.
If you execute snort maybe you will see the following issue:
ERROR: Could not find requested DAQ module: pcap
In this case, come back to configure all again and compile.
Enjoy!
Comments
Post a Comment