<div dir="auto"><div>Interesting it compiled from source, but I think it's looking for the lib in the wrong place after installing on your Ubuntu system (perhaps something went wonky after make install). If you're able to share the configure options you used, this would help troubleshoot too. I typically don't work much with Ubuntu, but shouldn't libhs be in /usr/lib? If it's a non-production environment, a copy of the file over to that directory to see if it alleviates the problem would confirm this.</div><div dir="auto"><br></div><div dir="auto">Re ldd. Try this: ldd /usr/bin/surictata<div dir="auto">Or wherever the full path is to the surictata binary. This would be the same thing the which command would return for ldd to check. It should list shared libraries the binary uses with their respective paths.</div><div dir="auto"><br></div><div dir="auto">Jeremy</div><br><div class="gmail_extra" dir="auto"><br><div class="gmail_quote">On Nov 30, 2017 7:36 PM, "Leonard Jacobs" <<a href="mailto:ljacobs@netsecuris.com">ljacobs@netsecuris.com</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Ubuntu 16.04<br>Compiled Suricata after installing Hyperscan.<br>I followed the instructions in documentation.<br><br>Give me specifically what you want with ldd. Better Example?<br><br>I have installed Suricata numerous times but never had this problem. Can't even run suricata --build-info without error. After running ./configure I saw that Hyperscan was enabled.<br><br><div><strong>
From:
</strong>
Jason Taylor <<a href="mailto:jtfas90@gmail.com" target="_blank">jtfas90@gmail.com</a>>
<br>
<strong>
To:
</strong>
Leonard Jacobs <<a href="mailto:ljacobs@netsecuris.com" target="_blank">ljacobs@netsecuris.com</a>>
<br>
<strong>
Cc:
</strong>
<<a href="mailto:oisf-users@lists.openinfosecfoundation.org" target="_blank">oisf-users@lists.<wbr>openinfosecfoundation.org</a>>
<br>
<strong>
Sent:
</strong>
11/30/2017 6:40 PM
<br><div class="quoted-text">
<strong>
Subject:
</strong>
Re: [Oisf-users] Getting error when running Suricata
<br><br></div><div class="elided-text"><blockquote class="m_878153855430004315mori" style="margin:0 0 0 .8ex;border-left:1px solid #ccc;padding-left:1ex"><div><div>Hi Leonard,</div><div><br></div><div>What OS is this running on? </div><div><br></div><div>How did suricata get installed?</div><div><br></div><div>How did hyperscan get installed?</div><div><br></div><div>Can you post the output of 'ldd $(which suricata)' ?</div><div><br></div><div>Thanks!</div><div><br></div><div>JT<br><div class="m_878153855430004315mcntgmail_extra"><br><div class="m_878153855430004315mcntgmail_quote">On Nov 30, 2017 19:10, "Leonard Jacobs" <<a href="mailto:ljacobs@netsecuris.com" title="Send email to ljacobs@netsecuris.com" class="m_878153855430004315mailto" target="_blank">ljacobs@netsecuris.com</a>> wrote:<br type="attribution"><blockquote class="m_878153855430004315mcntquote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>I am getting the following error when running anything with suricata. I am not sure what it means. I can see libhs.so.4 file in /usr/local/lib/x86_64-linux-<wbr>gnu/ directory.<br><br>suricata: error while loading shared libraries: libhs.so.4: cannot open shared object file: No such file or directory<br><font face="Arial" size="4"><br></font></div><br>______________________________<wbr>_________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org" title="Send email to oisf-users@openinfosecfoundation.org" class="m_878153855430004315mailto" target="_blank">oisf-users@<wbr>openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/<wbr>support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.<wbr>openinfosecfoundation.org/<wbr>mailman/listinfo/oisf-users</a><br>
<br>
Conference: <a href="https://suricon.net" target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" target="_blank">https://suricata-ids.org/<wbr>training/</a><br></blockquote></div><br></div></div></div>
</blockquote></div></div></div><br>______________________________<wbr>_________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@<wbr>openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" rel="noreferrer" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" rel="noreferrer" target="_blank">http://suricata-ids.org/<wbr>support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noreferrer" target="_blank">https://lists.<wbr>openinfosecfoundation.org/<wbr>mailman/listinfo/oisf-users</a><br>
<br>
Conference: <a href="https://suricon.net" rel="noreferrer" target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" rel="noreferrer" target="_blank">https://suricata-ids.org/<wbr>training/</a><br></blockquote></div><br></div></div></div>