New version of snort3 and libdaq3

Installing and Using OpenWrt
1

See my revert-pcre openwrt/packages wherein libpcre has been restored, and both libdaq3 and snort3 have been updated. You can pull the three commits (two reverts and one update) into your packages if you wish to build and run the latest and greatest version of snort3 until the PCRE2 patch is updated.

#  snort --version                             

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.3.3.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.16
           Using Hyperscan version 5.4.2 2024-08-19
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.0.14 4 Jun 2024
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1

Remember to update your /etc/snort/local.lua to comment the line pcre2_to_regex = false, if you have it.

@xxxx @efahl

2 Likes
2

Thanks I did this locally weeks ago and noticed that the pcre package was obviously restored because I no longer needed to add it manually as a feed. pcre2_to_regex = false should not be commented out but changed to pcre_to_regex = true

1 Like