HELLO,

Trisul 6.0 is looking really good but we are thinking is there a bug in the install?

When you install Trisul and Snort on the same box - Snort picks up Trisul libpcap (0.8)

/daq/daq_pfring.so: undefined symbol: pfring_set_filtering_mode

root@devbox-System-Product-Name:/var/log/nsm# ldd /usr/bin/snort
linux-vdso.so.1 => (0x00007ffddeff5000)
libdumbnet.so.1 => /usr/lib/libdumbnet.so.1 (0x00007f5369e51000)
libpcre.so.3 => /lib/x86_64-linux-gnu/libpcre.so.3 (0x00007f5369c13000)
libnsl.so.1 => /lib/x86_64-linux-gnu/libnsl.so.1 (0x00007f53699f8000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f53696f2000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f53694ee000)
libsfbpf.so.0 => /usr/lib/libsfbpf.so.0 (0x00007f53692c6000)
librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f53690be000)
libnuma.so.1 => /usr/lib/x86_64-linux-gnu/libnuma.so.1 (0x00007f5368eb3000)
libpcap.so.1 => /usr/local/lib/trisul-probe/libpcap.so.1 (0x00007f5368c6f000)
*************************************************

libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f5368a56000)


Platform Ubuntu 16.04 64bits.

VladimirZZZZZ

Hello Vladimir,


Can you move to our new forum at forums.trisul.org ?

I am copying this question over there and then posting an answer.

Best Regards,

Vivek