[Oisf-users] Suricata 3.0 issues on Debian 7 with PFRING / libcap-ng-dev
Spransy, Derek
dsprans at emory.edu
Tue Feb 2 09:40:31 EST 2016
I had a very similar issue compiling Suricata after installing pf_ring from RPM, even those these libraries were also installed. I forgot that I had to still manually compile and install the pf_ring version of libpcap. Once I did that I was able to compile Suricata without it complaining about these libraries.
________________________________________
From: Oisf-users <oisf-users-bounces at lists.openinfosecfoundation.org> on behalf of David Touzeau <david at articatech.com>
Sent: Monday, February 1, 2016 7:33 PM
To: oisf-users at lists.openinfosecfoundation.org
Subject: [Oisf-users] Suricata 3.0 issues on Debian 7 with PFRING / libcap-ng-dev
Hi i'm trying to compile suricata with pf_ring.
the main issue ( i did not know if it is a debian bug ) is that the
library libcap-ng cannot be detected with the following error
checking for cap-ng.h... yes
checking for capng_clear in -lcap-ng... no
WARNING! libcap-ng library not found, go get it
from https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fpeople.redhat.com%2fsgrubb%2flibcap-ng%2f&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=rd9ZJuwZnh%2btebaDzM03tV9M9YNPT%2f1g8O%2bkP%2fKhuxE%3d
or your distribution:
Ubuntu: apt-get install libcap-ng-dev
Fedora: yum install libcap-ng-devel
Suricata will be built without support for dropping privs.
It appears ld is on error :
ld -lcap-ng --verbose
../..
attempt to open /usr/lib/libcap-ng.so succeeded
-lcap-ng (/usr/lib/libcap-ng.so)
libc.so.6 needed by /usr/lib/libcap-ng.so
found libc.so.6 at /lib/x86_64-linux-gnu/libc.so.6
ld-linux-x86-64.so.2 needed by /usr/lib/libcap-ng.so
found ld-linux-x86-64.so.2 at /lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
ld: warning: cannot find entry symbol _start; not setting start address
The same error result on libpnsr4
checking for libnspr... yes
checking nspr.h usability... yes
checking nspr.h presence... yes
checking for nspr.h... yes
checking for PR_GetCurrentThread in -lnspr4... no
ERROR! libnspr library not found, go get it
from Mozilla or your distribution:
attempt to open /usr/lib/x86_64-linux-gnu/libnspr4.so succeeded
-lnspr4 (/usr/lib/x86_64-linux-gnu/libnspr4.so)
libpthread.so.0 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
found libpthread.so.0 at /lib/x86_64-linux-gnu/libpthread.so.0
libdl.so.2 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
found libdl.so.2 at /lib/x86_64-linux-gnu/libdl.so.2
libc.so.6 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
found libc.so.6 at /lib/x86_64-linux-gnu/libc.so.6
ld-linux-x86-64.so.2 needed by /lib/x86_64-linux-gnu/libpthread.so.0
found ld-linux-x86-64.so.2 at /lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
ld: warning: cannot find entry symbol _start; not setting start addres
Is there a way to fix it ??
_______________________________________________
Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
Site: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fsuricata-ids.org&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=EEtxMcZL%2fB0vLo6GJwCppYz0c5ngP%2fBWG7JDGHhi4Lo%3d | Support: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fsuricata-ids.org%2fsupport%2f&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=%2b2hrNcEvyoYFsrEjew0evRbI2WR1cTjv4n7XtdIS8Xg%3d
List: https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.openinfosecfoundation.org%2fmailman%2flistinfo%2foisf-users&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=iuMjEdIxMhAsq4p%2bbqdFAILbwSWkoPYK%2bQJJ5QX5j%2bM%3d
Suricata User Conference November 9-11 in Washington, DC: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2foisfevents.net&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=qjcvB9CB6IdnletKZ3D9PjA7lUAIphFmQReYRHifTwo%3d
________________________________
This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.
If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
More information about the Oisf-users
mailing list