[Oisf-users] Suricata compilation issues with pf_ring

[Spransy, Derek]

Hi Peter,

The packages are in fact installed. Everything configures just fine as long as I don't specify pf_ring support as a configure argument, or set the LIBS variable.

Thanks,
Derek
________________________________________
From: Peter Manev <petermanev at gmail.com>
Sent: Monday, September 21, 2015 3:42 PM
To: Spransy, Derek
Cc: oisf-users at lists.openinfosecfoundation.org
Subject: Re: [Oisf-users] Suricata compilation issues with pf_ring

On Mon, Sep 21, 2015 at 8:53 PM, Spransy, Derek <dsprans at emory.edu> wrote:
> Hello all,
>
> My apologies if this has been asked and answered previously, but I'm new to the list. I'm attempting to compile Suricata 2.0.8 on RHEL 7 with pf_ring (zero-copy) support. I encountered some problems while running configure during the linking of the pf_ring libraries. I found another listserv post that suggested setting LIBS="-lrt -lnuma" prior to running configure. This does indeed get me past the problems linking pf_ring, but later on I believe it causes issues with linking libpcap and file. The necessary packages are installed, and if I compile Suricata without pf_ring support, everything configures and compiles as expected.
>
> Here's a link to the output that I get when I compile with the LIBS variable defined, and without:
> https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fpastebin.com%2f8TfCAJQ3&data=01%7c01%7cdsprans%40emory.edu%7c0e02635e056b43ec424308d2c2bcbc1c%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=90IRdFEzEfKiwab%2fwf4fgZGU6z3%2bFav7FdlYRuQSPxE%3d
>
> And here's a snipped of the errors in config.log when run configure with and without the LIBS variable defined:
> https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fpastebin.com%2fSFz0GR26&data=01%7c01%7cdsprans%40emory.edu%7c0e02635e056b43ec424308d2c2bcbc1c%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=vdoXUM68W%2byXe4S%2fwHLypG4pOJ3qh6Znw5v09fNws2g%3d
>
> If anyone has seen this previously, can you suggest a workaround? Any help would be appreciated!

Is the file magic dev installed , if not -> apt-get install
libmagic-dev (on Ubuntu as suggested from the configure output) and
then redo the configure..... again.


>
> Thanks,
> Derek
>
>
>
> ________________________________
>
> This e-mail message (including any attachments) is for the sole use of
> the intended recipient(s) and may contain confidential and privileged
> information. If the reader of this message is not the intended
> recipient, you are hereby notified that any dissemination, distribution
> or copying of this message (including any attachments) is strictly
> prohibited.
>
> If you have received this message in error, please contact
> the sender by reply e-mail message and destroy all copies of the
> original message (including attachments).
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fsuricata-ids.org&data=01%7c01%7cdsprans%40emory.edu%7c0e02635e056b43ec424308d2c2bcbc1c%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=eOIYeQ7JmmXJlQk%2byYhxcmWaCVMqe3V4%2bx8%2blt1Ori8%3d | Support: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fsuricata-ids.org%2fsupport%2f&data=01%7c01%7cdsprans%40emory.edu%7c0e02635e056b43ec424308d2c2bcbc1c%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=WljyYHypomjtsb97Uaf2nBu2dnRu9VIFu0c207%2btS2Y%3d
> List: https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.openinfosecfoundation.org%2fmailman%2flistinfo%2foisf-users&data=01%7c01%7cdsprans%40emory.edu%7c0e02635e056b43ec424308d2c2bcbc1c%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=wFduoMxYwb26IL%2fwT9M8mPyuHh4Ar9Wt3llMs2Pzmlo%3d
> Suricata User Conference November 4 & 5 in Barcelona: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2foisfevents.net&data=01%7c01%7cdsprans%40emory.edu%7c0e02635e056b43ec424308d2c2bcbc1c%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=ahXRx6UJUzWNm2h1%2b5BWNftpJP6WBgYp3JJ9zvADwkk%3d



--
Regards,
Peter Manev