<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Adam,<div><br></div><div>I had exact the same problem with libnspr and I've fixed with extra switches for ./configure</div><div><br></div><div>Add these:</div><div>-with-libnspr-libraries=/usr/lib/ -with-libnspr-includes=/usr/include/nspr<br><br><div><hr id="stopSpelling">From: AWitt@westernalliancebank.com<br>To: oisf-users@lists.openinfosecfoundation.org<br>Date: Wed, 6 Apr 2016 04:27:39 +0000<br>Subject: [Oisf-users] pf_ring and libnspr<br><br>
<style><!--
.ExternalClass p.ecxMsoNormal, .ExternalClass li.ecxMsoNormal, .ExternalClass div.ecxMsoNormal {
font-size:11.0pt;
font-family:"Calibri","sans-serif";
}
.ExternalClass a:link, .ExternalClass span.ecxMsoHyperlink {
color:blue;
text-decoration:underline;
}
.ExternalClass span.ecxMsoHyperlinkFollowed {
color:purple;
text-decoration:underline;
}
.ExternalClass span.ecxEmailStyle17 {
font-family:"Calibri","sans-serif";
color:windowtext;
}
.ExternalClass .ecxMsoChpDefault {
font-family:"Calibri","sans-serif";
}
.ExternalClass div.ecxWordSection1 {
}
--></style>
<div class="ecxWordSection1">
<p class="ecxMsoNormal">Greetings—</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">While attempting to ./configure suricata 3.0.1, I’m encountering an issue when applying the --enable-pfring flag. I receive the error below:</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">./configure \</p>
<p class="ecxMsoNormal">--prefix=<DIR> \</p>
<p class="ecxMsoNormal">--enable-pfring \</p>
<p class="ecxMsoNormal">--enable-geoip \</p>
<p class="ecxMsoNormal">--with-libpfring-includes=<DIR> \</p>
<p class="ecxMsoNormal">--with-libpfring-libraries=<DIR> \</p>
<p class="ecxMsoNormal">--with-libpcap-includes=<DIR> \</p>
<p class="ecxMsoNormal">--with-libpcap-libraries=<DIR></p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal"><snip></p>
<p class="ecxMsoNormal">checking for libnspr... yes</p>
<p class="ecxMsoNormal">checking nspr.h usability... yes</p>
<p class="ecxMsoNormal">checking nspr.h presence... yes</p>
<p class="ecxMsoNormal">checking for nspr.h... yes</p>
<p class="ecxMsoNormal">checking for PR_GetCurrentThread in -lnspr4... no</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal"> ERROR! libnspr library not found, go get it</p>
<p class="ecxMsoNormal"> from Mozilla or your distribution:</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal"> Ubuntu: apt-get install libnspr4-dev</p>
<p class="ecxMsoNormal"> Fedora: yum install nspr-devel</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">...yet by removing the --enable-pfring flag and leaving everything else as-is, everything works nicely:<br>
<br>
</p>
<p class="ecxMsoNormal">./configure \</p>
<p class="ecxMsoNormal">--prefix=<DIR> \</p>
<p class="ecxMsoNormal">--enable-geoip \</p>
<p class="ecxMsoNormal">--with-libpfring-includes=<DIR> \</p>
<p class="ecxMsoNormal">--with-libpfring-libraries=<DIR> \</p>
<p class="ecxMsoNormal">--with-libpcap-includes=<DIR> \</p>
<p class="ecxMsoNormal">--with-libpcap-libraries=<DIR></p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">checking for libnspr... yes</p>
<p class="ecxMsoNormal">checking nspr.h usability... yes</p>
<p class="ecxMsoNormal">checking nspr.h presence... yes</p>
<p class="ecxMsoNormal">checking for nspr.h... yes</p>
<p class="ecxMsoNormal">checking for PR_GetCurrentThread in -lnspr4... yes</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">Thoughts? Any help is greatly appreciated.</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">Adam</p>
<p class="ecxMsoNormal"> </p>
</div>
<p style=""><a name="_GoBack" target="_blank"></a><font face="Times New Roman, serif"><font size="3"><i>Need to send me a file too big for email? You can upload it at
</i><a href="http://www.westernalliancebancorp.sharefile.com/" target="_blank"><i><b>www.westernalliancebancorp.sharefile.com</b></i></a><i>
</i></font></font></p>
<hr>
<BR>
<p class="ecxwestern" align="CENTER" style=""></p>
<p class="ecxwestern" style=""><font color="#808080"><font face="Arial, serif"><font size="1" style="font-size:7pt;">CONFIDENTIALITY. This email and any attachments are confidential, except where the email states it can be disclosed; it may also
be privileged. If received in error, please do not disclose the contents to anyone, but notify the sender by return email and delete this email (and any attachments) from your system.</font></font></font></p>
<p class="ecxwestern" style=""><br>
</p>
<br>_______________________________________________
Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org
Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
Suricata User Conference November 9-11 in Washington, DC: http://oisfevents.net</div></div> </div></body>
</html>