Hi,<br>I think you have two options.<br>If you must build Suri with PF_RING - right away, now - then you could use a previous version of PF_RING (due to the fact that PF_RING has changed themselves a few things, which the patch from Chris fixes) and follow the suri building guide.<br>
<br>The other option is to apply the patch provided by Chris Wakelin and use the latest version of PF_RING.<br><br>Thanks<br> <br><br><div class="gmail_quote">On Thu, May 10, 2012 at 8:52 AM, Novan Dwi C <span dir="ltr"><<a href="mailto:scubyx@gmail.com" target="_blank">scubyx@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span lang="en"><span>ok</span> <span>so</span> <span>is it still</span> <span>possible</span> <span>to</span> <span>build</span> <span>suricata</span> <span>with</span> <span>PF_RING</span><br>
<span>I still do not</span> <span>understand</span><br> <span>My</span> <span>supervisor</span> <span>told me to</span> <span>use</span> <span>suricata</span> <span>1.2 with</span> <span>using</span> <span>apt</span><span>-</span><span>get install</span><span>-</span><span>dev</span> <span>libmagic</span><br>
<span>but still</span> same <span>error</span><span>.</span> <br><span><br>I use</span> <span>PF_RING</span> <span>from</span> <span>SVN</span> <span>and</span><span></span> <span>suricata</span> <span>from GIT</span><span>.</span><br>
<span>written</span> <span>information</span> <span>on</span> <span>PF_RING</span> <span>PF_RING</span> <span>Version</span><span>:</span> <span>5.3.1 (</span><span>$ Revision</span><span>:</span> <span>exported</span> <span>$</span><span>)</span><br>
<span>is there</span> <span>another</span> <span>way</span> <span>to</span> <span>combine</span> <span>suricata with</span> <span>PF_RING</span> <span><br>
</span><span>thank you</span> <span>so much for</span> <span>replying</span> <span>my</span> <span>email</span></span> :)<div class="HOEnZb"><div class="h5"><br><br><div class="gmail_quote">On Sat, May 5, 2012 at 6:34 PM, Victor Julien <span dir="ltr"><<a href="mailto:victor@inliniac.net" target="_blank">victor@inliniac.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>On 05/05/2012 12:08 PM, Chris Wakelin wrote:<br>
> It looks like you're using the SVN version of PF_RING which changed<br>
> things a bit.<br>
><br>
> I got it to work with the attached patch, but we need to add some logic<br>
> to Suricata's configure to detect the new PF_RING version (I think<br>
> they're expecting to release the new version in the next couple of<br>
> weeks; I'm guessing it will be called 5.3.1 but might be 5.4.).<br>
<br>
</div>Can you open a ticket with that patch attached? We'll then cover the<br>
configure part.<br>
<br>
Thanks!<br>
Victor<br>
<div><div><br>
> Best Wishes,<br>
> Chris<br>
><br>
> On 05/05/12 04:12, Novan Dwi C wrote:<br>
>> hello there..<br>
>> i want to build an IDS suricata with pfring support, but i hava this error<br>
>> i use pfring v5 and suricata downloaded from GIT...<br>
>> here is the error<br>
>><br>
>> source-pfring.c: In function ‘ReceivePfringThreadInit’:<br>
>> source-pfring.c:337:5: error: too many arguments to function ‘pfring_open’<br>
>> /usr/local/include/pfring.h:261:11: note: declared here<br>
>> source-pfring.c:312:11: warning: unused variable ‘tmpclusterid’<br>
>> make[2]: *** [source-pfring.o] Error 1<br>
>> make[2]: Leaving directory `/home/skripsi/Downloads/oisf/src'<br>
>> make[1]: *** [install] Error 2<br>
>> make[1]: Leaving directory `/home/skripsi/Downloads/oisf/src'<br>
>> make: *** [install-recursive] Error 1<br>
>><br>
>> i dont know really what is this, i just configure it with ./configure<br>
>> --enable-pfring , and i continue with make then this error is appearing<br>
>> what can i do to fix it<br>
>> sorry if my english bad.. :p<br>
>><br>
>><br>
>><br>
>> _______________________________________________<br>
>> Oisf-users mailing list<br>
>> <a href="mailto:Oisf-users@openinfosecfoundation.org" target="_blank">Oisf-users@openinfosecfoundation.org</a><br>
>> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> Oisf-users mailing list<br>
> <a href="mailto:Oisf-users@openinfosecfoundation.org" target="_blank">Oisf-users@openinfosecfoundation.org</a><br>
> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br>
<br>
--<br>
</div></div>---------------------------------------------<br>
Victor Julien<br>
<a href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br>
PGP: <a href="http://www.inliniac.net/victorjulien.asc" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
---------------------------------------------<br>
<div><div><br>
_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org" target="_blank">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
</div></div></blockquote></div><br><br clear="all"><br></div></div><span class="HOEnZb"><font color="#888888">-- <br><font face="'courier new', monospace">Novan D.C</font><br>
</font></span><br>_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div>Regards,</div>
<div>Peter Manev</div><br>