[Oisf-users] Suricata with PF_RING on latest git
Edward Fjellskål
edwardfjellskaal at gmail.com
Wed Jul 4 19:35:49 UTC 2012
On 06/19/2012 03:55 PM, Peter Bates wrote:
>
> Hello again all
>
> I'm mostly trying to follow:
> https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1104
I
>
just tried:
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204
on a new installed host.
Same issues as Peter :(
also:
"If I install libpcap-dev (i.e. the distro supplied one)
then everything builds okay."
And it seems to work okay... from a 5 minute test...
E
> At the moment it doesn't seem to build with libpcap in another
> location either - or am I missing something?
>
> ./configure --with-libpcap-includes=/usr/local/include
> --with-libpcap-libraries=/usr/local/lib
>
> checking pcap.h usability... yes checking pcap.h presence... yes
> checking for pcap.h... yes checking for pcap_open_live in -lpcap...
> no
>
> ERROR! libpcap library not found, go get it from
> http://www.tcpdump.org or your distribution:
>
> Ubuntu: apt-get install libpcap-dev Fedora: yum install
> libpcap-devel
>
> In config.log:
>
> configure:15618: checking for pcap.h configure:15618: result: yes
> configure:15632: checking for pcap_open_live in -lpcap
> configure:15657: gcc -o conftest -g -O2 -Wextra -Wall
> -fno-strict-aliasing -fno-tree-pre -Wno-unused-parameter -std=gnu99
> -march=native -DHAVE_LIBNET11 -D_BSD_SOURCE -D__BSD_SOURCE
> -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H -I/usr/local/include
> -L/usr/local/lib conftest.c -lpcap -lnet -lpthread -lyaml -lpcre
> >&5 /usr/local/lib/libpcap.so: undefined reference to
> `pfring_get_ring_id' /usr/local/lib/libpcap.so: undefined reference
> to `pfring_breakloop' /usr/local/lib/libpcap.so: undefined
> reference to `pfring_enable_ring' /usr/local/lib/libpcap.so:
> undefined reference to `pfring_send' <snip>
>
> I can see there is clearly an interaction between the PF_RING
> modified libpcap and this process.
>
> If I install libpcap-dev (i.e. the distro supplied one) then
> everything builds okay.
>
>
> _______________________________________________ Oisf-users mailing
> list Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
More information about the Oisf-users
mailing list