[Oisf-users] pf_ring and libnspr

[Adam Witt]

I would also like to add, this servers is running RHEL 6, and that I installed pf_ring from today's rpm build. I also installed pf_ring-aware libpcap from source.

It appears that a similar User had the same problem, but was able to remedy the situation by installing the proper pf_ring-aware libpcap which I have already done: https://lists.openinfosecfoundation.org/pipermail/oisf-users/2016-February/005695.html

I also double-checked to ensure that both libcap-ng-devel and the relevant nspr packages are installed, and they are.

Adam

From: Oisf-users [mailto:oisf-users-bounces at lists.openinfosecfoundation.org] On Behalf Of Adam Witt
Sent: Tuesday, April 05, 2016 9:28 PM
To: oisf-users at lists.openinfosecfoundation.org
Subject: [Oisf-users] pf_ring and libnspr

Greetings-

While attempting to ./configure suricata 3.0.1, I'm encountering an issue when applying the --enable-pfring flag. I receive the error below:

./configure \
--prefix=<DIR> \
--enable-pfring \
--enable-geoip \
--with-libpfring-includes=<DIR> \
--with-libpfring-libraries=<DIR> \
--with-libpcap-includes=<DIR> \
--with-libpcap-libraries=<DIR>

<snip>
checking for libnspr... yes
checking nspr.h usability... yes
checking nspr.h presence... yes
checking for nspr.h... yes
checking for PR_GetCurrentThread in -lnspr4... no

   ERROR!  libnspr library not found, go get it
   from Mozilla or your distribution:

   Ubuntu: apt-get install libnspr4-dev
   Fedora: yum install nspr-devel

...yet by removing the --enable-pfring flag and leaving everything else as-is, everything works nicely:
./configure \
--prefix=<DIR> \
--enable-geoip \
--with-libpfring-includes=<DIR> \
--with-libpfring-libraries=<DIR> \
--with-libpcap-includes=<DIR> \
--with-libpcap-libraries=<DIR>

checking for libnspr... yes
checking nspr.h usability... yes
checking nspr.h presence... yes
checking for nspr.h... yes
checking for PR_GetCurrentThread in -lnspr4... yes

Thoughts? Any help is greatly appreciated.

Adam


Need to send me a file too big for email? You can upload it at www.westernalliancebancorp.sharefile.com<http://www.westernalliancebancorp.sharefile.com/>

________________________________

CONFIDENTIALITY. This email and any attachments are confidential, except where the email states it can be disclosed; it may also be privileged. If received in error, please do not disclose the contents to anyone, but notify the sender by return email and delete this email (and any attachments) from your system.



Need to send me a file too big for email? You can upload it at www.westernalliancebancorp.sharefile.com<http://www.westernalliancebancorp.sharefile.com/>

________________________________

CONFIDENTIALITY. This email and any attachments are confidential, except where the email states it can be disclosed; it may also be privileged. If received in error, please do not disclose the contents to anyone, but notify the sender by return email and delete this email (and any attachments) from your system.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160406/e2b17335/attachment-0002.html>