[Oisf-users] libhtp1 version woes.

[Russell Fulton]

> On 26 May 2015, at 10:46, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
> 
> Thanks Peter
> 
>> On 25 May 2015, at 19:01, Peter Manev <petermanev at gmail.com> wrote:
>> 
>> On Mon, May 25, 2015 at 3:26 AM, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
>>> Hi
>>> 
>>> On two of my sensors I get the following errors on starting suri:
>>> 
>>> suricata: error while loading shared libraries: libhtp-0.5.17.so.1: cannot open shared object file: No such file or directory
>> 
>> Can you try -
>> apt-get remove suricata libhtp1
>> apt-get install suricata
>> 
> 
> That did it.  I’m not sure how it got into that state. I think puppet must have had a hick up.

ubuntu 12.04

I have just tried to install  3.0RC1 on a new box using apt-get from the console and had exactly the same problem again so I tried removing both packages and re-installing suricata:

rful011 at secmonprd02:~$ sudo apt-get remove libhtp1 suricata
Reading package lists... Done
………..
Removing suricata ...
Stopping suricata:  No PID file found; not running?
Removing libhtp1 ...
Processing triggers for ureadahead ...
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
rful011 at secmonprd02:~$ sudo apt-get install suricata
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following extra packages will be installed:
  libhtp1
The following NEW packages will be installed
  libhtp1 suricata
0 to upgrade, 2 to newly install, 0 to remove and 92 not to upgrade.
Need to get 0 B/1,040 kB of archives.
After this operation, 2,715 kB of additional disk space will be used.
Do you want to continue [Y/n]? y
Selecting previously unselected package libhtp1.
(Reading database ... 103803 files and directories currently installed.)
Unpacking libhtp1 (from .../libhtp1_0.5.x.201509251847~ubuntu12.04.1_amd64.deb) ...
Selecting previously unselected package suricata.
Unpacking suricata (from .../suricata_3.0~RC1-0ubuntu0_amd64.deb) ...
Processing triggers for ureadahead ...
Setting up libhtp1 (0.5.x.201509251847~ubuntu12.04.1) ...
Setting up suricata (3.0~RC1-0ubuntu0) ...
Download and install the latest Emerging Threats Open ruleset 

Downloading...
Latest ET Open rule set deployed in /etc/suricata/rules !
Starting suricata in IDS (af-packet) mode... done.
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
rful011 at secmonprd02:~$ sudo su - sensors

sensors at secmonprd02:~$ suricata
suricata: error while loading shared libraries: libhtp-0.5.17.so.1: cannot open shared object file: No such file or directory

I have been around this loop twice ;)

Weird!  Any ideas.

Russell