[Oisf-users] Suricata 3.0 issues on Debian 7 with PFRING / libcap-ng-dev

[Peter Manev]

On Tue, Feb 2, 2016 at 1:33 AM, David Touzeau <david at articatech.com> wrote:
>
> Hi i'm trying to compile suricata with pf_ring.
>
> the main issue ( i did not know if it is a debian bug ) is that the library
> libcap-ng cannot be detected with the following error
>
> checking for cap-ng.h... yes
> checking for capng_clear in -lcap-ng... no
>
>    WARNING!  libcap-ng library not found, go get it
>    from http://people.redhat.com/sgrubb/libcap-ng/
>    or your distribution:
>
>    Ubuntu: apt-get install libcap-ng-dev
>    Fedora: yum install libcap-ng-devel
>
>    Suricata will be built without support for dropping privs.
>
>
> It appears ld is on error :
>
> ld -lcap-ng --verbose
>
> ../..
>
> attempt to open /usr/lib/libcap-ng.so succeeded
> -lcap-ng (/usr/lib/libcap-ng.so)
> libc.so.6 needed by /usr/lib/libcap-ng.so
> found libc.so.6 at /lib/x86_64-linux-gnu/libc.so.6
> ld-linux-x86-64.so.2 needed by /usr/lib/libcap-ng.so
> found ld-linux-x86-64.so.2 at /lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
> ld: warning: cannot find entry symbol _start; not setting start address
>
> The same error result on libpnsr4
>
> checking for libnspr... yes
> checking nspr.h usability... yes
> checking nspr.h presence... yes
> checking for nspr.h... yes
> checking for PR_GetCurrentThread in -lnspr4... no
>
>    ERROR!  libnspr library not found, go get it
>    from Mozilla or your distribution:
>
> attempt to open /usr/lib/x86_64-linux-gnu/libnspr4.so succeeded
> -lnspr4 (/usr/lib/x86_64-linux-gnu/libnspr4.so)
> libpthread.so.0 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
> found libpthread.so.0 at /lib/x86_64-linux-gnu/libpthread.so.0
> libdl.so.2 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
> found libdl.so.2 at /lib/x86_64-linux-gnu/libdl.so.2
> libc.so.6 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
> found libc.so.6 at /lib/x86_64-linux-gnu/libc.so.6
> ld-linux-x86-64.so.2 needed by /lib/x86_64-linux-gnu/libpthread.so.0
> found ld-linux-x86-64.so.2 at /lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
> ld: warning: cannot find entry symbol _start; not setting start addres
>
>
> Is there a way to fix it ??

apt-get install libnss3-dev libnspr4-dev libcap-ng-dev

and you should adjust your configure line to point to the right place
as explained here (for nss/nspr) -

https://redmine.openinfosecfoundation.org/projects/suricata/wiki/MD5




>
>
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 9-11 in Washington, DC:
> http://oisfevents.net



-- 
Regards,
Peter Manev