<br><br><div class="gmail_quote">On Mon, Apr 30, 2012 at 12:44 PM, Mike Cox <span dir="ltr"><<a href="mailto:mike.cox52@gmail.com" target="_blank">mike.cox52@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Peter,<br>
<br>
I do not have JSON logging enabled, just file-store with force-magic<br>
and force-md5.  As you can see, MAGIC is included and it is all files<br>
that do not have the MD5 sum included.<br>
<br>
To answer Marcos' question about libnss, I believe it is installed:<br>
<br>
[root@SURI2]# locate libnss<br>
/lib/<a href="http://libnss_compat-2.5.so" target="_blank">libnss_compat-2.5.so</a><br>
/lib/libnss_compat.so.2<br>
/lib/<a href="http://libnss_db-2.2.so" target="_blank">libnss_db-2.2.so</a><br>
/lib/libnss_db.so.2<br>
/lib/<a href="http://libnss_dns-2.5.so" target="_blank">libnss_dns-2.5.so</a><br>
/lib/libnss_dns.so.2<br>
/lib/<a href="http://libnss_files-2.5.so" target="_blank">libnss_files-2.5.so</a><br>
/lib/libnss_files.so.2<br>
/lib/<a href="http://libnss_hesiod-2.5.so" target="_blank">libnss_hesiod-2.5.so</a><br>
/lib/libnss_hesiod.so.2<br>
/lib/<a href="http://libnss_ldap-2.5.so" target="_blank">libnss_ldap-2.5.so</a><br>
/lib/libnss_ldap.so.2<br>
/lib/<a href="http://libnss_nis-2.5.so" target="_blank">libnss_nis-2.5.so</a><br>
/lib/libnss_nis.so.2<br>
/lib/<a href="http://libnss_nisplus-2.5.so" target="_blank">libnss_nisplus-2.5.so</a><br>
/lib/libnss_nisplus.so.2<br>
/lib/libnss_winbind.so.2<br>
/lib/libnss_wins.so.2<br>
/usr/lib/libnss3.so<br>
/usr/lib/libnss_compat.so<br>
/usr/lib/libnss_db.so<br>
/usr/lib/libnss_dns.so<br>
/usr/lib/libnss_files.so<br>
/usr/lib/libnss_hesiod.so<br>
/usr/lib/libnss_ldap.so<br>
/usr/lib/libnss_nis.so<br>
/usr/lib/libnss_nisplus.so<br>
/usr/lib/libnss_winbind.so<br>
/usr/lib/libnss_wins.so<br>
/usr/lib/libnssckbi.so<br>
/usr/lib/libnssutil3.so<br>
[root@SURI2 files]# which md5sum<br>
/usr/bin/md5sum<br>
<br>
Suricata was configured/installed with:<br>
<br>
./configure --enable-gccprotect --enable-profiling --enable-pfring<br>
--with-libpfring-libraries=/usr/local/lib<br>
--with-libpfring-includes=/usr/local/include<br>
--with-libpcap-libraries=/usr/local/lib<br>
--with-libpcap-includes=/usr/local/include<br>
--with-libhtp-includes=/usr/local/include<br>
--with-libhtp-libraries=/usr/local/lib --prefix=/usr/local/<br>
--sysconfdir=/etc/ --localstatedir=/var/<br>
<br>
Thanks.<br>
<span class="HOEnZb"><font color="#888888"><br>
 -Mike Cox</font></span></blockquote><div><br></div><div>Interesting.  I'm running into a similar situation on RHEL6 and Fedora 16.</div><div><br></div><div> ./configure --prefix=/data/suricata/suricata-1.3b --enable-dag --enable-debug --enable-debug-validation --enable-profiling --with-libnss-libraries=/usr/lib64 --with-libnss-includes=/usr/include/nss3/ --with-libnspr-libraries=/usr/lib64 --with-libnspr-libraries=/usr/include/nspr4</div>
<div><br></div><div><div>libnss support:                          no</div><div>libnspr support:                         no</div></div><div><br></div><div>When I finish the make && make install process and type ./bin/suricata --build-info, HAVE_NSS is not among the list.</div>
<div><br></div><div>Sorry I couldn't help.  At least you're not alone :o)</div><div><br></div><div>marcos</div><div><br></div><div><br></div></div>