[Oisf-users] libhtp1 version woes.

[Peter Manev]

On Fri, Nov 27, 2015 at 12:43 AM, Russell Fulton
<r.fulton at auckland.ac.nz> wrote:
>
>> On 26 May 2015, at 10:46, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
>>
>> Thanks Peter
>>
>>> On 25 May 2015, at 19:01, Peter Manev <petermanev at gmail.com> wrote:
>>>
>>> On Mon, May 25, 2015 at 3:26 AM, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
>>>> Hi
>>>>
>>>> On two of my sensors I get the following errors on starting suri:
>>>>
>>>> suricata: error while loading shared libraries: libhtp-0.5.17.so.1: cannot open shared object file: No such file or directory
>>>
>>> Can you try -
>>> apt-get remove suricata libhtp1
>>> apt-get install suricata
>>>
>>
>> That did it.  I’m not sure how it got into that state. I think puppet must have had a hick up.
>
> ubuntu 12.04
>
> I have just tried to install  3.0RC1 on a new box using apt-get from the console and had exactly the same problem again so I tried removing both packages and re-installing suricata:
>
> rful011 at secmonprd02:~$ sudo apt-get remove libhtp1 suricata
> Reading package lists... Done
> ………..
> Removing suricata ...
> Stopping suricata:  No PID file found; not running?
> Removing libhtp1 ...
> Processing triggers for ureadahead ...
> Processing triggers for libc-bin ...
> ldconfig deferred processing now taking place
> rful011 at secmonprd02:~$ sudo apt-get install suricata
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following extra packages will be installed:
>   libhtp1
> The following NEW packages will be installed
>   libhtp1 suricata
> 0 to upgrade, 2 to newly install, 0 to remove and 92 not to upgrade.
> Need to get 0 B/1,040 kB of archives.
> After this operation, 2,715 kB of additional disk space will be used.
> Do you want to continue [Y/n]? y
> Selecting previously unselected package libhtp1.
> (Reading database ... 103803 files and directories currently installed.)
> Unpacking libhtp1 (from .../libhtp1_0.5.x.201509251847~ubuntu12.04.1_amd64.deb) ...
> Selecting previously unselected package suricata.
> Unpacking suricata (from .../suricata_3.0~RC1-0ubuntu0_amd64.deb) ...
> Processing triggers for ureadahead ...
> Setting up libhtp1 (0.5.x.201509251847~ubuntu12.04.1) ...
> Setting up suricata (3.0~RC1-0ubuntu0) ...
> Download and install the latest Emerging Threats Open ruleset
>
> Downloading...
> Latest ET Open rule set deployed in /etc/suricata/rules !
> Starting suricata in IDS (af-packet) mode... done.
> Processing triggers for libc-bin ...
> ldconfig deferred processing now taking place
> rful011 at secmonprd02:~$ sudo su - sensors
>
> sensors at secmonprd02:~$ suricata
> suricata: error while loading shared libraries: libhtp-0.5.17.so.1: cannot open shared object file: No such file or directory
>
> I have been around this loop twice ;)
>
> Weird!  Any ideas.
>

Wired indeed...

Have you installed libhtp1 before on the same machine (through some
scripts maybe?)\Which Ubuntu flavour is that?

A simple  - apt-get update && apt-get upgrade should have done the trick.

Thanks

> Russell
>
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net



-- 
Regards,
Peter Manev