[Oisf-users] Error compiling suricata 1.3.2 against pf_ring 5.4.6

[Peter Manev]

ooops sorry Carlo,

I will try to reproduce the issue on a virtual test CentOS here ... see if
i hit the same problem....

On Mon, Oct 29, 2012 at 2:17 PM, C. L. Martinez <carlopmart at gmail.com>wrote:

> I can't do this Peter ... I haven't suricata binary yet ...
>
>
> On Mon, Oct 29, 2012 at 12:34 PM, Peter Manev <petermanev at gmail.com>
> wrote:
> > Hi,
> >
> > What would be the outcome of the following :
> >
> > sudo LD_LIBRARY_PATH=/usr/local/pfring/lib suricata --pfring-int=eth3
> > --pfring-cluster-id=99 --pfring-cluster-type=cluster_flow -c
> > /etc/suricata/suricata.yaml -D
> >
> > for example?
> >
> > thank you
> >
> >
> > On Mon, Oct 29, 2012 at 1:08 PM, C. L. Martinez <carlopmart at gmail.com>
> > wrote:
> >>
> >> I have modified location for pf_ring and libpcap libs. My commands:
> >>
> >> git clone git://phalanx.openinfosecfoundation.org/oisf.git suricata-git
> >> cd suricata-git
> >> sh autogen.sh
> >> ./configure --prefix=/opt/suricata --enable-pfring --enable-af-packet
> >> --enable-profiling --with-libpfring-includes=/opt/pf_ring/include
> >> --with-libpfring-libraries=/opt/pf_ring/lib
> >> --with-libpcap-includes=/opt/libpcap/include
> >> --with-libpcap-libraries=/opt/libpcap/lib
> >>
> >> I use same compile options for 1.3.2 version ... And, yes I see the
> >> guide in suricata's redmine, but my host is a CentOS 6.3 64bits ..
> >>
> >> On Mon, Oct 29, 2012 at 12:03 PM, Peter Manev <petermanev at gmail.com>
> >> wrote:
> >> > Hi ,
> >> >
> >> > What is our exact start command?
> >> > I am not sure if you have seen this guide -
> >> >
> >> >
> https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1204
> >> >
> >> >
> >> > thank you
> >> >
> >> >
> >> > On Mon, Oct 29, 2012 at 12:57 PM, C. L. Martinez <
> carlopmart at gmail.com>
> >> > wrote:
> >> >>
> >> >> Uhmm, strange. I have changed where pfring, libpcap libs and includes
> >> >> are located and error is:
> >> >>
> >> >> configure:17890: gcc -o conftest -g -O2 -Wextra -Wall
> >> >> -fno-strict-aliasing -fno-tree-pre -Wno-unused-parameter -std=gnu99
> >> >> -march=native -DPROFILING -DHAVE_LIBNET11 -D_BSD_SOURCE
> >> >> -D__BSD_SOURCE -D__FAVOR_BSD -DHAVE_NET_ETHERNET_H
> >> >> -DHAVE_LIBNET_ICMPV6_UNREACH -DHAVE_PFRING  -I/opt/pf_ring/include
> >> >> -L/opt/pf_ring/lib conftest.c -lpfring -lpcap -lnet -lpthr
> >> >> ead -lyaml -lpcre  >&5
> >> >> /usr/bin/ld: cannot find -lpcap
> >> >>
> >> >> Why?? I have setup LD_LIBRARY_PATH variable in this environment to
> >> >> point to libpcap and pfring libs, and my ldconfig output is:
> >> >>
> >> >> /opt/libpcap/lib:
> >> >>         libpcap.so.1 -> libpcap.so.1.1.1
> >> >> /usr/lib64/mysql:
> >> >>         libmysqlclient.so.16 -> libmysqlclient.so.16.0.0
> >> >>         libmysqlclient_r.so.16 -> libmysqlclient_r.so.16.0.0
> >> >> /opt/pf_ring/lib:
> >> >>         libpfring.so -> libpfring.so
> >> >>
> >> >> ....
> >> >>
> >> >> At this time, it is the same error for release 1.3.2 and from git
> >> >> version
> >> >> ...
> >> >>
> >> >>
> >> >> On Sat, Oct 27, 2012 at 7:27 AM, Victor Julien <lists at inliniac.net>
> >> >> wrote:
> >> >> > On 10/26/2012 10:13 PM, Martin Holste wrote:
> >> >> >> --with-libpcre-includes=/usr/local/pcre-8.20-RC1/include
> >> >> >> --with-libpcre-libraries=/usr/local/pcre-8.20-RC1/lib
> >> >> >
> >> >> > pcre is at 8.31 already, time to upgrade :)
> >> >> >
> >> >> > --
> >> >> > ---------------------------------------------
> >> >> > Victor Julien
> >> >> > http://www.inliniac.net/
> >> >> > PGP: http://www.inliniac.net/victorjulien.asc
> >> >> > ---------------------------------------------
> >> >> >
> >> >> > _______________________________________________
> >> >> > Oisf-users mailing list
> >> >> > Oisf-users at openinfosecfoundation.org
> >> >> >
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >> >> _______________________________________________
> >> >> Oisf-users mailing list
> >> >> Oisf-users at openinfosecfoundation.org
> >> >> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >> >
> >> >
> >> >
> >> >
> >> > --
> >> > Regards,
> >> > Peter Manev
> >> >
> >> _______________________________________________
> >> Oisf-users mailing list
> >> Oisf-users at openinfosecfoundation.org
> >> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >
> >
> >
> >
> > --
> > Regards,
> > Peter Manev
> >
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>



-- 
Regards,
Peter Manev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20121029/9cadfebd/attachment-0002.html>