[Oisf-users] Suricata with PF_RING on latest git

Peter Bates peter.bates at ucl.ac.uk
Tue Jun 19 13:55:22 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello again all

I'm mostly trying to follow:
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1104

At the moment it doesn't seem to build with libpcap in another
location either - or am I missing something?

./configure --with-libpcap-includes=/usr/local/include
- --with-libpcap-libraries=/usr/local/lib

checking pcap.h usability... yes
checking pcap.h presence... yes
checking for pcap.h... yes
checking for pcap_open_live in -lpcap... no

   ERROR!  libpcap library not found, go get it
   from http://www.tcpdump.org or your distribution:

   Ubuntu: apt-get install libpcap-dev
   Fedora: yum install libpcap-devel

In config.log:

configure:15618: checking for pcap.h
configure:15618: result: yes
configure:15632: checking for pcap_open_live in -lpcap
configure:15657: gcc -o conftest -g -O2 -Wextra -Wall -fno-strict-aliasing
- -fno-tree-pre -Wno-unused-parameter -std=gnu99 -march=native
- -DHAVE_LIBNET11 -D_BSD_SOURCE -D__BSD_SOURCE -D__FAVOR_BSD
- -DHAVE_NET_ETHERNET_H  -I/usr/local/include
- -L/usr/local/lib conftest.c -lpcap  -lnet -lpthread -lyaml -lpcre  >&5
/usr/local/lib/libpcap.so: undefined reference to `pfring_get_ring_id'
/usr/local/lib/libpcap.so: undefined reference to `pfring_breakloop'
/usr/local/lib/libpcap.so: undefined reference to `pfring_enable_ring'
/usr/local/lib/libpcap.so: undefined reference to `pfring_send'
<snip>

I can see there is clearly an interaction between the PF_RING modified
libpcap and this process.

If I install libpcap-dev (i.e. the distro supplied one)
then everything builds okay.

- -- 
Peter Bates
Senior Computer Security Officer    Phone: +44(0)2076792049
Information Services Division	    Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP4ITKAAoJELhVoVpEMS6RPQgH/2eShjxq5D42iOueF301QAVP
OTmDoo57U0If5j1+7vKJw3B4QzTpKaRhzJl1GDxkA4G86n6i+i+jOuclmO893rUf
gG/tEamh8uc/WI/s47Jv009NWG6p/5avm514ILn9F/WGQJjfTsrB07DVUg5/07Zu
320EoFuTClmfTnIhvDoZ2HZ+XQ5dZLOtEte77pTs/w6gEYYmTEYO8SVirupXizJ9
1dVeJNhfiIglnKC3S1Uyxu13MEtoysZPFM1NgWWD5/PHeSLuN/hxMrn3n09MJklt
M7SVzE+srpOJDqxHv8ec6g8pn6RA/9Vb3kXf8J0OpS/IgS7H5gfIalwdsCwBBM0=
=z5pa
-----END PGP SIGNATURE-----




More information about the Oisf-users mailing list