<html><head></head><body> linux-vdso.so.1 => (0x00007ffccef4f000)<br> libhtp.so.2 => /usr/lib/libhtp.so.2 (0x00007f09721ad000)<br> librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f0971fa5000)<br> libGeoIP.so.1 => /usr/lib/x86_64-linux-gnu/libGeoIP.so.1 (0x00007f0971d76000)<br> libluajit-5.1.so.2 => /usr/local/lib/libluajit-5.1.so.2 (0x00007f0971b06000)<br> libmagic.so.1 => /usr/lib/x86_64-linux-gnu/libmagic.so.1 (0x00007f09718ea000)<br> libcap-ng.so.0 => /usr/lib/x86_64-linux-gnu/libcap-ng.so.0 (0x00007f09716e5000)<br> libpcap.so.0.8 => /usr/lib/x86_64-linux-gnu/libpcap.so.0.8 (0x00007f09714a7000)<br> libnet.so.1 => /usr/lib/x86_64-linux-gnu/libnet.so.1 (0x00007f097128e000)<br> libnetfilter_queue.so.1 => /usr/lib/x86_64-linux-gnu/libnetfilter_queue.so.1 (0x00007f0971087000)<br> libnfnetlink.so.0 => /usr/lib/x86_64-linux-gnu/libnfnetlink.so.0 (0x00007f0970e80000)<br> libjansson.so.4 => /usr/lib/x86_64-linux-gnu/libjansson.so.4 (0x00007f0970c74000)<br> libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f0970a56000)<br> libyaml-0.so.2 => /usr/lib/x86_64-linux-gnu/libyaml-0.so.2 (0x00007f0970836000)<br> libpcre.so.3 => /lib/x86_64-linux-gnu/libpcre.so.3 (0x00007f09705f8000)<br> libhs.so.4 => not found<br> libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f097022f000)<br> libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f0970016000)<br> libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f096fd10000)<br> libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f096fb0c000)<br> libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f096f8f6000)<br> /lib64/ld-linux-x86-64.so.2 (0x00007f09723cc000)<br> libmnl.so.0 => /usr/lib/x86_64-linux-gnu/libmnl.so.0 (0x00007f096f6f1000)<br><br><br><div><strong>
From:
</strong>
Jeremy MJ <jskier@gmail.com>
<br>
<strong>
To:
</strong>
Leonard Jacobs <ljacobs@netsecuris.com>
<br>
<strong>
Cc:
</strong>
Jason Taylor <jtfas90@gmail.com>, Open Information Security Foundation <oisf-users@lists.openinfosecfoundation.org>
<br>
<strong>
Sent:
</strong>
11/30/2017 8:41 PM
<br>
<strong>
Subject:
</strong>
Re: [Oisf-users] Getting error when running Suricata
<br><br><blockquote class="mori" style="margin:0 0 0 .8ex;border-left:1px solid #CCC;padding-left:1ex;"><div><div>Interesting it compiled from source, but I think it's looking for the lib in the wrong place after installing on your Ubuntu system (perhaps something went wonky after make install). If you're able to share the configure options you used, this would help troubleshoot too. I typically don't work much with Ubuntu, but shouldn't libhs be in /usr/lib? If it's a non-production environment, a copy of the file over to that directory to see if it alleviates the problem would confirm this.</div><div><br></div><div>Re ldd. Try this: ldd /usr/bin/surictata<div>Or wherever the full path is to the surictata binary. This would be the same thing the which command would return for ldd to check. It should list shared libraries the binary uses with their respective paths.</div><div><br></div><div>Jeremy</div><br><div class="mcntgmail_extra"><br><div class="mcntgmail_quote">On Nov 30, 2017 7:36 PM, "Leonard Jacobs" <<a href="mailto:ljacobs@netsecuris.com" title="Send email to ljacobs@netsecuris.com" class="mailto" target="_blank">ljacobs@netsecuris.com</a>> wrote:<br type="attribution"><blockquote class="mcntquote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div>Ubuntu 16.04<br>Compiled Suricata after installing Hyperscan.<br>I followed the instructions in documentation.<br><br>Give me specifically what you want with ldd. Better Example?<br><br>I have installed Suricata numerous times but never had this problem. Can't even run suricata --build-info without error. After running ./configure I saw that Hyperscan was enabled.<br><br><div><strong>
From:
</strong>
Jason Taylor <<a href="mailto:jtfas90@gmail.com" target="_blank" title="Send email to jtfas90@gmail.com" class="mailto">jtfas90@gmail.com</a>>
<br>
<strong>
To:
</strong>
Leonard Jacobs <<a href="mailto:ljacobs@netsecuris.com" target="_blank" title="Send email to ljacobs@netsecuris.com" class="mailto">ljacobs@netsecuris.com</a>>
<br>
<strong>
Cc:
</strong>
<<a href="mailto:oisf-users@lists.openinfosecfoundation.org" target="_blank" title="Send email to oisf-users@lists.openinfosecfoundation.org" class="mailto">oisf-users@lists.openinfosecfoundation.org</a>>
<br>
<strong>
Sent:
</strong>
11/30/2017 6:40 PM
<br><div class="mcntquoted-text">
<strong>
Subject:
</strong>
Re: [Oisf-users] Getting error when running Suricata
<br><br></div><div class="mcntelided-text"><blockquote class="mcntm_878153855430004315mori" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div><div>Hi Leonard,</div><div><br></div><div>What OS is this running on? </div><div><br></div><div>How did suricata get installed?</div><div><br></div><div>How did hyperscan get installed?</div><div><br></div><div>Can you post the output of 'ldd $(which suricata)' ?</div><div><br></div><div>Thanks!</div><div><br></div><div>JT<br><div class="mcntm_878153855430004315mcntgmail_extra"><br><div class="mcntm_878153855430004315mcntgmail_quote">On Nov 30, 2017 19:10, "Leonard Jacobs" <<a href="mailto:ljacobs@netsecuris.com" title="Send email to ljacobs@netsecuris.com" class="mailto m_878153855430004315mailto" target="_blank">ljacobs@netsecuris.com</a>> wrote:<br type="attribution"><blockquote class="mcntm_878153855430004315mcntquote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div>I am getting the following error when running anything with suricata. I am not sure what it means. I can see libhs.so.4 file in /usr/local/lib/x86_64-linux-gnu/ directory.<br><br>suricata: error while loading shared libraries: libhs.so.4: cannot open shared object file: No such file or directory<br><font face="Arial" size="4"><br></font></div><br>_______________________________________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org" title="Send email to oisf-users@openinfosecfoundation.org" class="mailto m_878153855430004315mailto" target="_blank">oisf-users@openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br>
Conference: <a href="https://suricon.net" target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" target="_blank">https://suricata-ids.org/training/</a><br></blockquote></div><br></div></div></div>
</blockquote></div></div></div><br>_______________________________________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org" title="Send email to oisf-users@openinfosecfoundation.org" class="mailto" target="_blank">oisf-users@openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br>
Conference: <a href="https://suricon.net" target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" target="_blank">https://suricata-ids.org/training/</a><br></blockquote></div><br></div></div></div>
</blockquote></div></body></html>