I wanted to reply and inform of the resolution for this issue I encountered. I am running on a 64 bit OS, and what I found was that a precompiled package I created for the daq required lipcap to be installed, and grabbed it from yum. This broke the dependencies of dna on the libnl libraries as the yum version is not compiled against it.
Once I removed the libpcap that it installed (1.4.0), I also recompiled the daq manually rather than using my pre-compiled one. This resolved the issue. Everything is now running normally. Thank you, Alicia S. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Alicia Smith Sent: Tuesday, August 05, 2014 2:44 PM To: [email protected] Subject: Re: [Ntop-misc] pfring_dna and Snort - restarted server -now snort won't start Hello Mike, Thank you for your reply. We rebuilt snort, pfring, dna_daq, and everything started the first time. After restarting the process, I'm back to the same issue. I really don't understand why it started in the first place at this point. Were you ever able to figure it out? Alicia S. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Mike Patterson Sent: Wednesday, July 09, 2014 3:27 PM To: [email protected] Subject: Re: [Ntop-misc] pfring_dna and Snort - restarted server -now snort won't start Hi Alicia - I have a very similar situation on my RHEL 6.5 server. Yesterday I was fighting this problem and eventually *seemed* to fix it by iterating through building pfring (6.0.1) and the DAQ (DNA, r2795) with libnl-devel installed, then rebuilding userland with it uninstalled. That seems to have been a coincidence, since post-reboot, I'm back to the same error you're getting. Some further details on my own installation: I have 16 queues, pfcount works on all of them, so I'm reasonably certain I have the pfring and ixgbe drivers configured correctly. tcpdump also works as expected; it's just snort itself that seems to be giving me grief. I call snort with a ton of arguments, I've removed everything that doesn't have to do with DNA/pfring: --daq-dir=/usr/local/lib/daq --daq pfring_dna --daq-mode passive Mike _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
