[Oisf-users] Trying to build suricata with hyperscan under FreeBSD 10.3

[Viiret, Justin]

Hi,

This is because the Hyperscan port you have built does not include shared libraries, and this currently causes the hs_compile test in configure.ac to fail. I believe that the current FreeBSD port does allow you to switch on the SHARED option when you build it, which will build shared libraries and solve this particular issue. We also recommend the NATIVE option, which will allow the use of modern instruction set extensions as well.

(For background: this issue is because the compiler portion of the Hyperscan library is written in C++, but Suricata's configure script doesn't know that it needs C++ linkage for libhs when it tests for hs_compile(). With a shared library, the library itself knows about its dependency on the C++ standard library and takes care of it for us. We're looking into ways to clean this up a bit in the future.)

Best regards,
    Justin


> -----Original Message-----
> From: Oisf-users [mailto:oisf-users-
> bounces at lists.openinfosecfoundation.org] On Behalf Of C. L. Martinez
> Sent: Tuesday, April 26, 2016 4:52 PM
> To: oisf-users at lists.openinfosecfoundation.org
> Subject: [Oisf-users] Trying to build suricata with hyperscan under FreeBSD
> 10.3
> 
> Hi all,
> 
>  I am trying to build suricata 3.0.1 with hyperscan support under FreeBSD
> 10.3, but configure returns me the following error:
> 
> checking hs.h usability... yes
> checking hs.h presence... yes
> checking for hs.h... yes
> checking for hs_compile in -lhs... no
> 
>    Hyperscan headers are present, but link test failed.
>    Check that you have a shared library and C++ linkage available.
> 
>  Hyperscan is installed:
> 
> root at testbsdsuri:/tmp/o/suricata-3.0.1 # pkg info -l hyperscan
> hyperscan-4.1.0:
> 	/usr/local/include/hs/hs.h
> 	/usr/local/include/hs/hs_common.h
> 	/usr/local/include/hs/hs_compile.h
> 	/usr/local/include/hs/hs_runtime.h
> 	/usr/local/lib/libhs.a
> 	/usr/local/lib/libhs_runtime.a
> 	/usr/local/libdata/pkgconfig/libhs.pc
> 	/usr/local/share/licenses/hyperscan-4.1.0/BSD3CLAUSE
> 	/usr/local/share/licenses/hyperscan-4.1.0/LICENSE
> 	/usr/local/share/licenses/hyperscan-4.1.0/catalog.mk
> 
>  Do I need to add any other package??
> 
> Thanks.
> 
> --
> Greetings,
> C. L. Martinez
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 9-11 in Washington, DC:
> http://oisfevents.net