Hi,<br><br>Just updated the wiki page.<br><br><a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/MD5">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/MD5</a><br><br>Thanks<br><br><div class="gmail_quote">
On Tue, May 1, 2012 at 2:56 PM, Mike Cox <span dir="ltr"><<a href="mailto:mike.cox52@gmail.com" target="_blank">mike.cox52@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Thanks Marcos, et. al.,<br>
<br>
Passing configure the libnss and libnspr directories did the trick for<br>
me too.  We should include this tip in the wiki page for<br>
file_extraction;  it looks like it needs a little updating anyway.<br>
<br>
<a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/File_Extraction" target="_blank">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/File_Extraction</a><br>
<br>
Thanks.<br>
<span class="HOEnZb"><font color="#888888"><br>
 -Mike Cox<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
On Mon, Apr 30, 2012 at 1:06 PM, Marcos Rodriguez<br>
<<a href="mailto:marcos.e.rodriguez@gmail.com">marcos.e.rodriguez@gmail.com</a>> wrote:<br>
>>> Interesting.  I'm running into a similar situation on RHEL6 and Fedora<br>
>>> 16.<br>
>>><br>
>>>  ./configure --prefix=/data/suricata/suricata-1.3b --enable-dag<br>
>>> --enable-debug --enable-debug-validation --enable-profiling<br>
>>> --with-libnss-libraries=/usr/lib64 --with-libnss-includes=/usr/include/nss3/<br>
>>> --with-libnspr-libraries=/usr/lib64<br>
>>> --with-libnspr-libraries=/usr/include/nspr4<br>
>>><br>
>>> libnss support:                          no<br>
>>> libnspr support:                         no<br>
>>><br>
>>> When I finish the make && make install process and type ./bin/suricata<br>
>>> --build-info, HAVE_NSS is not among the list.<br>
>>><br>
>>> Sorry I couldn't help.  At least you're not alone :o)<br>
>>><br>
>>> marcos<br>
>>><br>
>>><br>
>> Aha!<br>
>><br>
>> I only needed to specify --with-libnss-includes=/usr/include/nss3/ and<br>
>> --with-libnspr-includes=/usr/include/nspr4, and voila!<br>
>><br>
>> Thanks!<br>
>><br>
>> marcos<br>
><br>
><br>
> Sorry guys, one more spam:<br>
><br>
> I'm now using force-md5 on both files-log.json and file store settings.<br>
>  Here's a sample of one of my meta files (I removed my IP's):<br>
><br>
> TIME:              04/30/2012-14:05:10.914869<br>
> SRC IP:            REMOVED<br>
> DST IP:            REMOVED<br>
> PROTO:             6<br>
> SRC PORT:          80<br>
> DST PORT:          10753<br>
> HTTP URI:<br>
>  /edgedl/update2/<a href="http://1.3.21.111/GoogleUpdateSetup.exe?cms_redirect=yes" target="_blank">1.3.21.111/GoogleUpdateSetup.exe?cms_redirect=yes</a><br>
> HTTP HOST:         <a href="http://o-o.preferred.iad09s12.v1.lscache3.c.pack.google.com" target="_blank">o-o.preferred.iad09s12.v1.lscache3.c.pack.google.com</a><br>
> HTTP REFERER:      <unknown><br>
> FILENAME:          /edgedl/update2/<a href="http://1.3.21.111/GoogleUpdateSetup.exe" target="_blank">1.3.21.111/GoogleUpdateSetup.exe</a><br>
> MAGIC:             PE32 executable for MS Windows (GUI) Intel 80386 32-bit<br>
> STATE:             CLOSED<br>
> MD5:               a72bf16320bed66098bf02c618831ff9<br>
> SIZE:              739640<br>
><br>
><br>
</div></div><div class="HOEnZb"><div class="h5">_______________________________________________<br>
Oisf-devel mailing list<br>
<a href="mailto:Oisf-devel@openinfosecfoundation.org">Oisf-devel@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div>Regards,</div>
<div>Peter Manev</div><br>