[SOLVED] Libpcap installed but no detected

Peter_APIIT · 08-01-2015, 03:14 AM

Dear All,

I had installed libpcap-1.7.4 from tcpdump.org into my OpenBSD machine but when I running ./configure command for DAQ packages, it cannot detected the libpcap installation.

Why is the error?

Error:

Code:

Checking for pcap_lib_version >= 1.0.0 not found
Error: 
Get it from http://www.tcpdump.org

Please help. Thanks.

rknichols · 08-01-2015, 10:17 AM

You probably need to install the libpcap-devel package. It contains the header files that the compiler needs.

Peter_APIIT · 08-02-2015, 04:11 AM

Quote:

Originally Posted by rknichols

You probably need to install the libpcap-devel package. It contains the header files that the compiler needs.

Do you know where to download the libpcap-devel files for OpenBSD?

unSpawn · 08-02-2015, 04:36 AM

If you followed the instructions (you never posted what you actually did, neither did you show if files were installed properly nor is there any evidence you checked the configure.log) 'make install;' puts libraries in /usr/local/lib and the headers in /usr/local/include. So after you 'ldconfig -mrv /usr/local/lib' then you './configure --with-libpcap-libraries=/usr/local/lib --with-libpcap-includes=/usr/local/include;' and check the log for clues. If unsure post actual log lines that contain clues and not only the final error message because that doesn't help us help you.

Tinkster · 08-02-2015, 11:31 AM

Moved: This thread is more suitable in <BSD> and has been moved accordingly to help your thread/question get the exposure it deserves.

Peter_APIIT · 08-02-2015, 07:58 PM

Quote:

Originally Posted by unSpawn

If you followed the instructions (you never posted what you actually did, neither did you show if files were installed properly nor is there any evidence you checked the configure.log) 'make install;' puts libraries in /usr/local/lib and the headers in /usr/local/include. So after you 'ldconfig -mrv /usr/local/lib' then you './configure --with-libpcap-libraries=/usr/local/lib --with-libpcap-includes=/usr/local/include;' and check the log for clues. If unsure post actual log lines that contain clues and not only the final error message because that doesn't help us help you.

Thanks for your explanation. I had tried to run with

Code:

  
./configure --with-libpcap-libraries=/usr/local/lib --with-libpcap-includes=/usr/local/include --enable-afpacket-module=yes

but afpacket and nfq was not configured successfully.

Config.log shows:

Quote:

conftest.c:11:28: error: ac_nonexistent.h: No such file or directory

| /* confdefs.h */
| #define PACKAGE_NAME "daq"
| #define PACKAGE_TARNAME "daq"
| #define PACKAGE_VERSION "2.0.6"
| #define PACKAGE_STRING "daq 2.0.6"
| #define PACKAGE_BUGREPORT "snort-team@sourcefire.com"
| #define PACKAGE_URL ""
| #define PACKAGE "daq"
| #define VERSION "2.0.6"
| /* end confdefs.h. */
| #include <ac_nonexistent.h>

conftest.c:58:28: error: linux/if_ether.h: No such file or directory
conftest.c:58:29: error: linux/if_packet.h: No such file or directory
conftest.c: In function 'main':
conftest.c:34: error: 'TPACKET2_HDRLEN' undeclared (first use in this function)
conftest.c:34: error: (Each undeclared identifier is reported only once
conftest.c:34: error: for each function it appears in.)

conftest.c:35: error: 'PACKET_TX_RING' undeclared (first use in this function)
conftest.c:35: error: (Each undeclared identifier is reported only once
conftest.c:35: error: for each function it appears in.)

conftest.c:62:20: error: libipq.h: No such file or directory

conftest.c:33:29: error: linux/netfilter.h: No such file or directory

conftest.c:63:51: error: libnetfilter_queue/libnetfilter_queue.h: No such file or directory
conftest.c:36:24: error: net/netmap.h: No such file or directory

conftest.c:36:29: error: net/netmap_user.h: No such file or directory

conftest.c:34:43: error: net/netmap.h: No such file or directory
conftest.c: In function 'main':
conftest.c:44: error: 'NETMAP_API' undeclared (first use in this function)
conftest.c:44: error: (Each undeclared identifier is reported only once
conftest.c:44: error: for each function it appears in.)

/usr/bin/ld: cannot find -ldl

conftest.c:78: error: expected expression before ')' token

My os is OpenBSD 5.7.
How to port Linux IP FIlter related files to OpenBSD.

Please help. Thanks.

cynwulf · 08-03-2015, 07:02 AM

Quote:

Originally Posted by Peter_APIIT

My os is OpenBSD 5.7.
How to port Linux IP FIlter related files to OpenBSD.

Please help. Thanks.

What exactly are you trying to achieve?

Peter_APIIT · 08-03-2015, 09:56 PM

Quote:

Originally Posted by cynwulf

What exactly are you trying to achieve?

I would like to install DAQ with afpacket and finally install Snort IPS using afpacket. There is Snort packages from OpenBSD repositories but it does not have afpacket included.

Based on the error at config.log, DAQ with afpacket is only applicable to Linux only. Therefore, I wonder how to port those linux IP Filter header file to OpenBSD?

Please help. Thanks.

cynwulf · 08-04-2015, 03:15 PM

I really can't see the sense in trying to port Linux AF_PACKET code to OpenBSD sorry and can't really help (wouldn't know where to start for one thing). Rather than splitting over two sites, perhaps concentrate on your more active thread at daemonforums.org ?