[Oisf-users] Suricata from GIT with PF_RING on Ubuntu 12 LTS query

[Peter Bates]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 12/06/2012 13:59, Chris Wakelin wrote:
> I don't build or install it as root :)

Well I wouldn't normally as it pretty much goes against how ever many
years of good practice in the Unix world.

Following the Suricata wiki does provide me with a working binary.

> Looks like you're missing telling it where pfring libraries are?

I'd agree, I've just done:

./configure --enable-pfring
- --with-libpfring-libraries=/usr/local/lib
- --with-libpfring-includes=/usr/local/include
- --with-libpcap-libraries=/usr/local/lib
- --with-libpcap-includes=/usr/local/include
LD_RUN_PATH=/usr/local/lib

and still get:

checking for pfring_open in -lpfring... no

   ERROR! --enable-pfring was passed but the library was not found or
version is >4, go get it
   from http://www.ntop.org/PF_RING.html

> on Ubuntu 10.04, where PF_RING is installed in /opt/RDGpfring etc.
> (I also have symlinks to the PF_RING libpcap in /usr/local/lib,
> though I could have added things to ld.conf I guess).

Indeed. 'make install' for PF_RING installs to /usr/local although
my next step might be to build everything into a unique directory.

> One gotcha with PF_RING is you may need to "cp -R <PF_RING 
> distribution>/kernel/linux <PF_RING install>/include" to get
> pf_ring.h in the right place.

pf_ring.h is in /usr/local/lib
- - as placed by the PF_RING 'make install'.

Obviously to make it clear, it *does* compile for me, I'm just curious
as to the difference between running configure as a normal user and as
root and why it is necessary.

/usr/local/lib is included in ld.so.conf/etc.

- -- 
Peter Bates
Senior Computer Security Officer    Phone: +44(0)2076792049
Information Services Division	    Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP10OlAAoJELhVoVpEMS6RzfwH/j0m/y4xjuCoTXd9UY/4Qi2c
el5AiO68olOdFe0QuuNQfp1iR1rj4FDjWeLogu5csX40FUMjwy6GXR4WOxDZIYJx
CV4qAg9P1ybH8zAjddqv9mJrRbUI87Y3cZRwp1z42HLwqlfG5DGPa6luAdSrNKbZ
vmI7AqeDv4tO5KIpGHiG+OW+8MKoGygi+cRg6zyrDDMsGtvrPeXvDcXPCp8lrRFm
XWDX4VmtWRC+ps1502TxYn7xAuQKrYHQY1if59VfM2WFPDtX5lvPX/QlwXVGaI7u
Q1k02uzPTkxYaUKsY5VlxC/kI8grd1Zf8STy7JqYshHlHHJ6BOfYyZ/YhVpFW3w=
=fsiF
-----END PGP SIGNATURE-----