Hi,<br><br>What would be the outcome of the following :<br><br>sudo LD_LIBRARY_PATH=/usr/local/pfring/lib suricata --pfring-int=eth3 --pfring-cluster-id=99 --pfring-cluster-type=cluster_flow -c /etc/suricata/suricata.yaml -D<br>
<br>for example?<br><br>thank you<br><br><div class="gmail_quote">On Mon, Oct 29, 2012 at 1:08 PM, C. L. Martinez <span dir="ltr"><<a href="mailto:carlopmart@gmail.com" target="_blank">carlopmart@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have modified location for pf_ring and libpcap libs. My commands:<br>
<div class="im"><br>
git clone git://<a href="http://phalanx.openinfosecfoundation.org/oisf.git" target="_blank">phalanx.openinfosecfoundation.org/oisf.git</a> suricata-git<br>
cd suricata-git<br>
</div>sh autogen.sh<br>
./configure --prefix=/opt/suricata --enable-pfring --enable-af-packet<br>
--enable-profiling --with-libpfring-includes=/opt/pf_ring/include<br>
--with-libpfring-libraries=/opt/pf_ring/lib<br>
--with-libpcap-includes=/opt/libpcap/include<br>
--with-libpcap-libraries=/opt/libpcap/lib<br>
<br>
I use same compile options for 1.3.2 version ... And, yes I see the<br>
guide in suricata's redmine, but my host is a CentOS 6.3 64bits ..<br>
<div class="HOEnZb"><div class="h5"><br>
On Mon, Oct 29, 2012 at 12:03 PM, Peter Manev <<a href="mailto:petermanev@gmail.com">petermanev@gmail.com</a>> wrote:<br>
> Hi ,<br>
><br>
> What is our exact start command?<br>
> I am not sure if you have seen this guide -<br>
> <a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204" target="_blank">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204</a><br>
><br>
><br>
> thank you<br>
><br>
><br>
> On Mon, Oct 29, 2012 at 12:57 PM, C. L. Martinez <<a href="mailto:carlopmart@gmail.com">carlopmart@gmail.com</a>><br>
> wrote:<br>
>><br>
>> Uhmm, strange. I have changed where pfring, libpcap libs and includes<br>
>> are located and error is:<br>
>><br>
>> configure:17890: gcc -o conftest -g -O2 -Wextra -Wall<br>
>> -fno-strict-aliasing -fno-tree-pre -Wno-unused-parameter -std=gnu99<br>
>> -march=native -DPROFILING -DHAVE_LIBNET11 -D_BSD_SOURCE<br>
>> -D__BSD_SOURCE -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H<br>
>> -DHAVE_LIBNET_ICMPV6_UNREACH -DHAVE_PFRING -I/opt/pf_ring/include<br>
>> -L/opt/pf_ring/lib conftest.c -lpfring -lpcap -lnet -lpthr<br>
>> ead -lyaml -lpcre >&5<br>
>> /usr/bin/ld: cannot find -lpcap<br>
>><br>
>> Why?? I have setup LD_LIBRARY_PATH variable in this environment to<br>
>> point to libpcap and pfring libs, and my ldconfig output is:<br>
>><br>
>> /opt/libpcap/lib:<br>
>> libpcap.so.1 -> libpcap.so.1.1.1<br>
>> /usr/lib64/mysql:<br>
>> libmysqlclient.so.16 -> libmysqlclient.so.16.0.0<br>
>> libmysqlclient_r.so.16 -> libmysqlclient_r.so.16.0.0<br>
>> /opt/pf_ring/lib:<br>
>> libpfring.so -> libpfring.so<br>
>><br>
>> ....<br>
>><br>
>> At this time, it is the same error for release 1.3.2 and from git version<br>
>> ...<br>
>><br>
>><br>
>> On Sat, Oct 27, 2012 at 7:27 AM, Victor Julien <<a href="mailto:lists@inliniac.net">lists@inliniac.net</a>> wrote:<br>
>> > On 10/26/2012 10:13 PM, Martin Holste wrote:<br>
>> >> --with-libpcre-includes=/usr/local/pcre-8.20-RC1/include<br>
>> >> --with-libpcre-libraries=/usr/local/pcre-8.20-RC1/lib<br>
>> ><br>
>> > pcre is at 8.31 already, time to upgrade :)<br>
>> ><br>
>> > --<br>
>> > ---------------------------------------------<br>
>> > Victor Julien<br>
>> > <a href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br>
>> > PGP: <a href="http://www.inliniac.net/victorjulien.asc" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
>> > ---------------------------------------------<br>
>> ><br>
>> > _______________________________________________<br>
>> > Oisf-users mailing list<br>
>> > <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>> > <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>> _______________________________________________<br>
>> Oisf-users mailing list<br>
>> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>> <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
><br>
><br>
><br>
><br>
> --<br>
> Regards,<br>
> Peter Manev<br>
><br>
_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div>Regards,</div>
<div>Peter Manev</div><br>