[Oisf-users] Error compiling suricata 1.3.2 against pf_ring 5.4.6

Martin Holste mcholste at gmail.com
Tue Oct 30 15:05:39 UTC 2012

Ok, then I think the strangeness is being caused by having both an
/opt/libpcap and an /opt/pf_ring.  It would be simpler if libpcap.so
was in /opt/pf_ring/lib, and I find that when I simplify things like
this, the errors go away.

On Tue, Oct 30, 2012 at 9:57 AM, C. L. Martinez <carlopmart at gmail.com> wrote:
> On Tue, Oct 30, 2012 at 2:21 PM, Martin Holste <mcholste at gmail.com> wrote:
>> PF_RING requires it's own version of libpcap, so although there is
>> technically a libpfring and a libpcap, the libpcap is really part of
>> PF_RING and you can't separate the two.  When I build a box, I always
>> remove the system-installed version of libpcap, like apt-get remove
>> libpcap so that I know whatever libpcap is being used by the system is
>> the PF_RING version.  That said, there's no reason that you can't have
>> both on the system, it just creates more opportunities for compile
>> errors like this.
>> To find missing links without having to run the whole "make," you can just run:
>> ldd /opt/pf_ring/lib/libpfring.so
>> You should see the same error regarding an undefined reference.  My
>> hunch is that when you compiled libpfring, it used the stock system
>> libpcap instead of the bundled PF_RING libpcap, but that's just a
>> guess.  I would try recompiling libpfring.so.
> Thanks Martin, but there is not another libpcap installed in this
> system apart of libpcap provided by pfring
> [root at nsm01 log]# rpm -qa | grep libpcap
> [root at nsm01 log]# rpm -qa | grep pcap
> [root at nsm01 log]#
> And ..
> [root at nsm01 rsyslog]# ldd /opt/pf_ring/lib/libpfring.so
>         linux-vdso.so.1 =>  (0x00007fff1e9ff000)
>         libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fe631e0f000)
>         libnl.so.1 => /lib64/libnl.so.1 (0x00007fe631bbc000)
>         libc.so.6 => /lib64/libc.so.6 (0x00007fe631829000)
>         /lib64/ld-linux-x86-64.so.2 (0x00007fe632250000)
>         libm.so.6 => /lib64/libm.so.6 (0x00007fe6315a5000)
> [root at nsm01 log]# ldd /opt/libpcap/lib/libpcap.so.1.1.1
>         linux-vdso.so.1 =>  (0x00007fff013ff000)
>         libnl.so.1 => /lib64/libnl.so.1 (0x00007fb3a6157000)
>         libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fb3a5f39000)
>         libc.so.6 => /lib64/libc.so.6 (0x00007fb3a5ba6000)
>         libm.so.6 => /lib64/libm.so.6 (0x00007fb3a5922000)
>         /lib64/ld-linux-x86-64.so.2 (0x00007fb3a6604000)
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users

More information about the Oisf-users mailing list