Snort--install---Dependency-resolve

#./configure

Error encountered:

Checking for Pfring_open in-lpcap ... no

error! Libpcap library/headers (Libpcap.a (or. So)/pcap.h)

Not found, go get it from http://www.tcpdump.org

Or use the--with-libpcap-* options if you have it installed

In unusual place. Also Check if your libpcap depends on another

Shared library that could be installed in a unusual place

The libpcap.so.1.1.1 was found under/usr/lib, so enter:

# sudo ln-s/usr/lib/libpcap.so.1.1.1/usr/lib/libpcap.so

Again./configure, encountered error:

Checking for pcre.h ... no

error! Libpcre header not found.

Get it from http://www.pcre.org

In the new stand find Libpcre3-dev installed. Again./configure, new error:

Checking for dumbnet.h ... no

error! Dnet header not found, go get it from

http://code.google.com/p/libdnet/or Use the--with-dnet-*

Options, if you have it installed in a unusual place

Install Libdumbnet-devon the new stand, continue./configure,new ERROR:

./configure:line 15155:daq-modules-config:command Not found

Checking for Daq_load_modules in-ldaq_static ... no

error! Daq_static Library not found, go get it from

http://www.snort.org/.

Download daq-1.1.1.tar.gzfrom official website and install and new error:

Checking for capable Lex ... insufficient

Configure:error:Your operating system ' s Lex is insufficient to compile

LIBSFBPF. You should install both Bison and flex.

Flex is a Lex replacement this has many advantages,

including being able to compile LIBSFBPF. For more

Information, see http://www.gnu.org/software/flex/flex.html.

# sudo apt-get install flex

# sudo apt-get install Bison

New error:

Checking for Libpcap version >= "1.0.0" ... no

error! Libpcap Library version >= 1.0.0 not found.

Get it from http://www.tcpdump.org

Found that seems to be libpcap version is too low, from the new installation of Libpcap-dev,

Finally passed the check,

And then # make

# sudo make install

The DAQ installation is complete and snort continues to install.

# CD snort-2.9.3.1

#/configure no problem.

# make

# sudo make install

Get.

And then there was a mistake.

#snort-V

Snort:error while loading shared libraries:libsfbpf.so.0:cannot open Shared object file:no such file or directory

It was installed in the/usr/local/lib. Make a link:

#sudo ln-s/usr/local/lib/libsfbpf.so.0.0.1/usr/lib/libsfbpf.so.0

Snort--install---Dependency-resolve