Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Oct 2011 19:15:50 GMT
From:      Michael Scheidell <scheidell@secnap.net>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/161382: net/daq version 6.x is not compatible with snort 2.9.0.
Message-ID:  <201110071915.p97JFo6L065559@red.freebsd.org>
Resent-Message-ID: <201110071920.p97JK2J8059758@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         161382
>Category:       ports
>Synopsis:       net/daq version 6.x is not compatible with snort 2.9.0.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Oct 07 19:20:01 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        7.4 amd
>Organization:
SECNAP Network Security Corp
>Environment:
>Description:
ports packages should always be upward compatible.
ie: don't take things out that used to work.

example: snort 2.9.0 needs daq 5.0 (not daq 6.0)

if you install daq 6.0 and try to start snort 2.9.0, you get this:

ERROR size 616 != 744
Stopping snort.
Waiting for PIDS: 17847.
Starting snort.
ERROR size 616 != 744


daq should be updated so that if someone is running legacy snort, it won't break.

upgrade snort at the same time? ok, but in the real world, that doesn't work.

example:  snort 2.9.1.1 has removed support for snortsam, its marked broken.

so, many people cannot upgrade.


>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201110071915.p97JFo6L065559>