[Oisf-users] Error compiling suricata 1.3.2 against pf_ring 5.4.6

C. L. Martinez carlopmart at gmail.com
Mon Oct 29 13:17:05 UTC 2012


I can't do this Peter ... I haven't suricata binary yet ...


On Mon, Oct 29, 2012 at 12:34 PM, Peter Manev <petermanev at gmail.com> wrote:
> Hi,
>
> What would be the outcome of the following :
>
> sudo LD_LIBRARY_PATH=/usr/local/pfring/lib suricata --pfring-int=eth3
> --pfring-cluster-id=99 --pfring-cluster-type=cluster_flow -c
> /etc/suricata/suricata.yaml -D
>
> for example?
>
> thank you
>
>
> On Mon, Oct 29, 2012 at 1:08 PM, C. L. Martinez <carlopmart at gmail.com>
> wrote:
>>
>> I have modified location for pf_ring and libpcap libs. My commands:
>>
>> git clone git://phalanx.openinfosecfoundation.org/oisf.git suricata-git
>> cd suricata-git
>> sh autogen.sh
>> ./configure --prefix=/opt/suricata --enable-pfring --enable-af-packet
>> --enable-profiling --with-libpfring-includes=/opt/pf_ring/include
>> --with-libpfring-libraries=/opt/pf_ring/lib
>> --with-libpcap-includes=/opt/libpcap/include
>> --with-libpcap-libraries=/opt/libpcap/lib
>>
>> I use same compile options for 1.3.2 version ... And, yes I see the
>> guide in suricata's redmine, but my host is a CentOS 6.3 64bits ..
>>
>> On Mon, Oct 29, 2012 at 12:03 PM, Peter Manev <petermanev at gmail.com>
>> wrote:
>> > Hi ,
>> >
>> > What is our exact start command?
>> > I am not sure if you have seen this guide -
>> >
>> > https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204
>> >
>> >
>> > thank you
>> >
>> >
>> > On Mon, Oct 29, 2012 at 12:57 PM, C. L. Martinez <carlopmart at gmail.com>
>> > wrote:
>> >>
>> >> Uhmm, strange. I have changed where pfring, libpcap libs and includes
>> >> are located and error is:
>> >>
>> >> configure:17890: gcc -o conftest -g -O2 -Wextra -Wall
>> >> -fno-strict-aliasing -fno-tree-pre -Wno-unused-parameter -std=gnu99
>> >> -march=native -DPROFILING -DHAVE_LIBNET11 -D_BSD_SOURCE
>> >> -D__BSD_SOURCE -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H
>> >> -DHAVE_LIBNET_ICMPV6_UNREACH -DHAVE_PFRING  -I/opt/pf_ring/include
>> >> -L/opt/pf_ring/lib conftest.c -lpfring -lpcap -lnet -lpthr
>> >> ead -lyaml -lpcre  >&5
>> >> /usr/bin/ld: cannot find -lpcap
>> >>
>> >> Why?? I have setup LD_LIBRARY_PATH variable in this environment to
>> >> point to libpcap and pfring libs, and my ldconfig output is:
>> >>
>> >> /opt/libpcap/lib:
>> >>         libpcap.so.1 -> libpcap.so.1.1.1
>> >> /usr/lib64/mysql:
>> >>         libmysqlclient.so.16 -> libmysqlclient.so.16.0.0
>> >>         libmysqlclient_r.so.16 -> libmysqlclient_r.so.16.0.0
>> >> /opt/pf_ring/lib:
>> >>         libpfring.so -> libpfring.so
>> >>
>> >> ....
>> >>
>> >> At this time, it is the same error for release 1.3.2 and from git
>> >> version
>> >> ...
>> >>
>> >>
>> >> On Sat, Oct 27, 2012 at 7:27 AM, Victor Julien <lists at inliniac.net>
>> >> wrote:
>> >> > On 10/26/2012 10:13 PM, Martin Holste wrote:
>> >> >> --with-libpcre-includes=/usr/local/pcre-8.20-RC1/include
>> >> >> --with-libpcre-libraries=/usr/local/pcre-8.20-RC1/lib
>> >> >
>> >> > pcre is at 8.31 already, time to upgrade :)
>> >> >
>> >> > --
>> >> > ---------------------------------------------
>> >> > Victor Julien
>> >> > http://www.inliniac.net/
>> >> > PGP: http://www.inliniac.net/victorjulien.asc
>> >> > ---------------------------------------------
>> >> >
>> >> > _______________________________________________
>> >> > Oisf-users mailing list
>> >> > Oisf-users at openinfosecfoundation.org
>> >> > https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>> >> _______________________________________________
>> >> Oisf-users mailing list
>> >> Oisf-users at openinfosecfoundation.org
>> >> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>> >
>> >
>> >
>> >
>> > --
>> > Regards,
>> > Peter Manev
>> >
>> _______________________________________________
>> Oisf-users mailing list
>> Oisf-users at openinfosecfoundation.org
>> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
>
>
>
> --
> Regards,
> Peter Manev
>



More information about the Oisf-users mailing list