Snort 基础1

[root@h101 snort]# ll
total 6560
-rw-r--r-- 1 root root  514687 Oct 28 13:53 daq-2.0.6.tar.gz
-rw-r--r-- 1 root root 6198052 Oct 28 13:53 snort-2.9.7.6.tar.gz
[root@h101 snort]# tar -zxvf daq-2.0.6.tar.gz 
daq-2.0.6/
daq-2.0.6/ChangeLog
daq-2.0.6/missing
daq-2.0.6/daq.dsp
daq-2.0.6/configure
...
...
daq-2.0.6/m4/lt~obsolete.m4
daq-2.0.6/m4/ltoptions.m4
daq-2.0.6/configure.ac
[root@h101 snort]# ll 
total 6564
drwxr-xr-x 6 1000 1000    4096 Jul 17 05:06 daq-2.0.6
-rw-r--r-- 1 root root  514687 Oct 28 13:53 daq-2.0.6.tar.gz
-rw-r--r-- 1 root root 6198052 Oct 28 13:53 snort-2.9.7.6.tar.gz
[root@h101 snort]# 

[root@h101 snort]# cd daq-2.0.6
[root@h101 daq-2.0.6]# ls
aclocal.m4  ChangeLog  config.guess  config.sub  configure.ac  daq.dsp  install-sh  m4           Makefile.in  os-daq-modules  sfbpf
api         compile    config.h.in   configure   COPYING       depcomp  ltmain.sh   Makefile.am  missing      README
[root@h101 daq-2.0.6]# ./configure 
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking for gcc... gcc
...
...
checking for getaddrinfo... yes
checking for flex... flex
checking for flex 2.4 or higher... yes
checking for bison... no
configure: WARNING: don't have both flex and bison; reverting to lex/yacc
checking for capable lex... insufficient
configure: error: Your operating system's lex is insufficient to compile
         libsfbpf. You should install both bison and flex.
         flex is a lex replacement that has many advantages,
         including being able to compile libsfbpf.  For more
         information, see http://www.gnu.org/software/flex/flex.html .
[root@h101 daq-2.0.6]# echo $?
1
[root@h101 daq-2.0.6]#