Error in installation of Snort 2.97.0

ETC Homework & Coursework Questions
1

Use and complete the template provided. The entire template must be completed. If you don't, your post may be deleted!

  1. The problem statement, all variables and given/known data:
    My system is Redhat 5.6. I want to install snort in my system which requires following dependencies.

  2. Libpcap 1.0.0

  3. Libdnet 1.12

  4. daq 2.0.4
    And then finally we can install the snort.
    The problem is that when I install libpcap 1.0.0, it gets installed properly but after that when I install daq , it says that libpcap 1.0.0 not found or missing.
    I checked rpm -qa | grep libpcap , it gives me that
    libpcap-devel-0.9.4-15.el5
    libpcap-0.9.4-15.el5
    are installed.
    I dont know why I am unable to upgrade it to 1.0.0.
    And if you have any other idea so that I can install snort on my rhel 5.6.
    Please help me.

  5. Relevant commands, code, scripts, algorithms:

  6. The attempts at a solution (include all code and scripts):
    I have tried solving with various versions of libpcap but still problem remains same.

  7. Complete Name of School (University), City (State), Country, Name of Professor, and Course Number (Link to Course):
    University of Texas at Arlington, Arlington , USA , Dr. Wright, 5308

Note: Without school/professor/course information, you will be banned if you post here! You must complete the entire template (not just parts of it).

2

Which command did you run exactly :wall:

3

Hi, This error was while installing DAQ...
I just run ./configure in the DAQ directory.

4

Building and installing libpcap by hand does not inform your package manager of it. (Installing it by hand also probably installed it into nonstandard locations which your package manager, or ./configure, would not search for libraries inside). You should undo all the changes you made and install an appropriate RPM for your system instead.

Otherwise, you will be forced to build everything by hand, and keep doing so, when you need upgrades for those packages and anything depending on them.

5

Thanks a lot. Let me try this.

6

Hi I think I have configure the snort properly. Now the problem is when I log on with root everything works fine, but if I log on with other user account , it gives the following error.
ERROR: Can't start DAQ (-1) - socket: Operation not permitted!
Fatal Error, Quitting..
I am not getting how to resolve this.
I have created one group called 'snort' and added the user to that group.
Please guide me.

7

It inevitably requires administrator access to snoop on your system in that way. You could use sudo instead of logging into a different account.

8

Thanks a lot Corona688. I will add my users in sudoer's file.

9

Thanks a lot Corona688. I think in that case I need to add my users to sudoers file, then only they can access snort.