[Oisf-users] Suricata with PF_RING on latest git

[Edward Fjellskål]

On 06/19/2012 03:55 PM, Peter Bates wrote:
> 
> Hello again all
> 
> I'm mostly trying to follow: 
> https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1104

I
> 
just tried:
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204

on a new installed host.

Same issues as Peter :(

also:
"If I install libpcap-dev (i.e. the distro supplied one)
then everything builds okay."

And it seems to work okay... from a 5 minute test...

E


> At the moment it doesn't seem to build with libpcap in another 
> location either - or am I missing something?
> 
> ./configure --with-libpcap-includes=/usr/local/include 
> --with-libpcap-libraries=/usr/local/lib
> 
> checking pcap.h usability... yes checking pcap.h presence... yes 
> checking for pcap.h... yes checking for pcap_open_live in -lpcap...
> no
> 
> ERROR!  libpcap library not found, go get it from
> http://www.tcpdump.org or your distribution:
> 
> Ubuntu: apt-get install libpcap-dev Fedora: yum install
> libpcap-devel
> 
> In config.log:
> 
> configure:15618: checking for pcap.h configure:15618: result: yes 
> configure:15632: checking for pcap_open_live in -lpcap 
> configure:15657: gcc -o conftest -g -O2 -Wextra -Wall
> -fno-strict-aliasing -fno-tree-pre -Wno-unused-parameter -std=gnu99
> -march=native -DHAVE_LIBNET11 -D_BSD_SOURCE -D__BSD_SOURCE
> -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H  -I/usr/local/include 
> -L/usr/local/lib conftest.c -lpcap  -lnet -lpthread -lyaml -lpcre
> >&5 /usr/local/lib/libpcap.so: undefined reference to
> `pfring_get_ring_id' /usr/local/lib/libpcap.so: undefined reference
> to `pfring_breakloop' /usr/local/lib/libpcap.so: undefined
> reference to `pfring_enable_ring' /usr/local/lib/libpcap.so:
> undefined reference to `pfring_send' <snip>
> 
> I can see there is clearly an interaction between the PF_RING
> modified libpcap and this process.
> 
> If I install libpcap-dev (i.e. the distro supplied one) then
> everything builds okay.
> 
> 
> _______________________________________________ Oisf-users mailing
> list Oisf-users at openinfosecfoundation.org 
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>