"The issue with Gentoo and the IPQ and NFQ DAQs is that the current ebuild for libdnet does not compile with PIC so we get relocation errors when we try to build those DAQs. We need to get the libdnet package maintainer to roll a package with the PIC USE flag before I can add IPQ and NFQ support to the DAQ ebuild." Of the five DAQ types available for use, the IPQ and NFQ are closest to pre Snort 2.9 usage, but are not available due to the above. Thanks Reproducible: Always Actual Results: Due to limitations of libdnet in this instance, the ebuild for DAQ (dependency of Snort) does not support IPQ and NFQ
This is correct. IPQ and NFQ require libdnet to be built with PIC in order for these snort DAQ modules to be built. I'll post some actual output later when I get back from vacation (~Jan 3).
Per the README file in the latest DAQ tarball available on the Snort website: <quote> Also, libdnet is required for IPQ and NFQ DAQs. If you get a relocation error trying to build those DAQs, you may need to reinstall libdnet and configure it with something like this: ./configure "CFLAGS=-fPIC -g -O2" </quote>
This can be closed. This issue was resolved with the daq-0.6.1 ebuild committed to portage last week.
Thanks. Also, reassigning since the problem was fixed in daq, not libdnet.