[Oisf-users] Error compiling suricata 1.3.2 against pf_ring 5.4.6

Peter Manev petermanev at gmail.com
Mon Oct 29 12:34:50 UTC 2012


Hi,

What would be the outcome of the following :

sudo LD_LIBRARY_PATH=/usr/local/pfring/lib suricata --pfring-int=eth3
--pfring-cluster-id=99 --pfring-cluster-type=cluster_flow -c
/etc/suricata/suricata.yaml -D

for example?

thank you

On Mon, Oct 29, 2012 at 1:08 PM, C. L. Martinez <carlopmart at gmail.com>wrote:

> I have modified location for pf_ring and libpcap libs. My commands:
>
> git clone git://phalanx.openinfosecfoundation.org/oisf.git suricata-git
> cd suricata-git
> sh autogen.sh
> ./configure --prefix=/opt/suricata --enable-pfring --enable-af-packet
> --enable-profiling --with-libpfring-includes=/opt/pf_ring/include
> --with-libpfring-libraries=/opt/pf_ring/lib
> --with-libpcap-includes=/opt/libpcap/include
> --with-libpcap-libraries=/opt/libpcap/lib
>
> I use same compile options for 1.3.2 version ... And, yes I see the
> guide in suricata's redmine, but my host is a CentOS 6.3 64bits ..
>
> On Mon, Oct 29, 2012 at 12:03 PM, Peter Manev <petermanev at gmail.com>
> wrote:
> > Hi ,
> >
> > What is our exact start command?
> > I am not sure if you have seen this guide -
> >
> https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204
> >
> >
> > thank you
> >
> >
> > On Mon, Oct 29, 2012 at 12:57 PM, C. L. Martinez <carlopmart at gmail.com>
> > wrote:
> >>
> >> Uhmm, strange. I have changed where pfring, libpcap libs and includes
> >> are located and error is:
> >>
> >> configure:17890: gcc -o conftest -g -O2 -Wextra -Wall
> >> -fno-strict-aliasing -fno-tree-pre -Wno-unused-parameter -std=gnu99
> >> -march=native -DPROFILING -DHAVE_LIBNET11 -D_BSD_SOURCE
> >> -D__BSD_SOURCE -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H
> >> -DHAVE_LIBNET_ICMPV6_UNREACH -DHAVE_PFRING  -I/opt/pf_ring/include
> >> -L/opt/pf_ring/lib conftest.c -lpfring -lpcap -lnet -lpthr
> >> ead -lyaml -lpcre  >&5
> >> /usr/bin/ld: cannot find -lpcap
> >>
> >> Why?? I have setup LD_LIBRARY_PATH variable in this environment to
> >> point to libpcap and pfring libs, and my ldconfig output is:
> >>
> >> /opt/libpcap/lib:
> >>         libpcap.so.1 -> libpcap.so.1.1.1
> >> /usr/lib64/mysql:
> >>         libmysqlclient.so.16 -> libmysqlclient.so.16.0.0
> >>         libmysqlclient_r.so.16 -> libmysqlclient_r.so.16.0.0
> >> /opt/pf_ring/lib:
> >>         libpfring.so -> libpfring.so
> >>
> >> ....
> >>
> >> At this time, it is the same error for release 1.3.2 and from git
> version
> >> ...
> >>
> >>
> >> On Sat, Oct 27, 2012 at 7:27 AM, Victor Julien <lists at inliniac.net>
> wrote:
> >> > On 10/26/2012 10:13 PM, Martin Holste wrote:
> >> >> --with-libpcre-includes=/usr/local/pcre-8.20-RC1/include
> >> >> --with-libpcre-libraries=/usr/local/pcre-8.20-RC1/lib
> >> >
> >> > pcre is at 8.31 already, time to upgrade :)
> >> >
> >> > --
> >> > ---------------------------------------------
> >> > Victor Julien
> >> > http://www.inliniac.net/
> >> > PGP: http://www.inliniac.net/victorjulien.asc
> >> > ---------------------------------------------
> >> >
> >> > _______________________________________________
> >> > Oisf-users mailing list
> >> > Oisf-users at openinfosecfoundation.org
> >> > https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >> _______________________________________________
> >> Oisf-users mailing list
> >> Oisf-users at openinfosecfoundation.org
> >> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >
> >
> >
> >
> > --
> > Regards,
> > Peter Manev
> >
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>



-- 
Regards,
Peter Manev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20121029/821be562/attachment-0002.html>


More information about the Oisf-users mailing list