[Oisf-users] Suricata 3.0 issues on Debian 7 with PFRING / libcap-ng-dev

[Spransy, Derek]

I had a very similar issue compiling Suricata after installing pf_ring from RPM, even those these libraries were also installed. I forgot that I had to still manually compile and install the pf_ring version of libpcap. Once I did that I was able to compile Suricata without it complaining about these libraries.

________________________________________
From: Oisf-users <oisf-users-bounces at lists.openinfosecfoundation.org> on behalf of David Touzeau <david at articatech.com>
Sent: Monday, February 1, 2016 7:33 PM
To: oisf-users at lists.openinfosecfoundation.org
Subject: [Oisf-users] Suricata 3.0 issues on Debian 7 with PFRING /     libcap-ng-dev

Hi i'm trying to compile suricata with pf_ring.

the main issue ( i did not know if it is a debian bug ) is that the
library libcap-ng cannot be detected with the following error

checking for cap-ng.h... yes
checking for capng_clear in -lcap-ng... no

    WARNING!  libcap-ng library not found, go get it
    from https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fpeople.redhat.com%2fsgrubb%2flibcap-ng%2f&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=rd9ZJuwZnh%2btebaDzM03tV9M9YNPT%2f1g8O%2bkP%2fKhuxE%3d
    or your distribution:

    Ubuntu: apt-get install libcap-ng-dev
    Fedora: yum install libcap-ng-devel

    Suricata will be built without support for dropping privs.


It appears ld is on error :

ld -lcap-ng --verbose

../..

attempt to open /usr/lib/libcap-ng.so succeeded
-lcap-ng (/usr/lib/libcap-ng.so)
libc.so.6 needed by /usr/lib/libcap-ng.so
found libc.so.6 at /lib/x86_64-linux-gnu/libc.so.6
ld-linux-x86-64.so.2 needed by /usr/lib/libcap-ng.so
found ld-linux-x86-64.so.2 at /lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
ld: warning: cannot find entry symbol _start; not setting start address

The same error result on libpnsr4

checking for libnspr... yes
checking nspr.h usability... yes
checking nspr.h presence... yes
checking for nspr.h... yes
checking for PR_GetCurrentThread in -lnspr4... no

    ERROR!  libnspr library not found, go get it
    from Mozilla or your distribution:

attempt to open /usr/lib/x86_64-linux-gnu/libnspr4.so succeeded
-lnspr4 (/usr/lib/x86_64-linux-gnu/libnspr4.so)
libpthread.so.0 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
found libpthread.so.0 at /lib/x86_64-linux-gnu/libpthread.so.0
libdl.so.2 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
found libdl.so.2 at /lib/x86_64-linux-gnu/libdl.so.2
libc.so.6 needed by /usr/lib/x86_64-linux-gnu/libnspr4.so
found libc.so.6 at /lib/x86_64-linux-gnu/libc.so.6
ld-linux-x86-64.so.2 needed by /lib/x86_64-linux-gnu/libpthread.so.0
found ld-linux-x86-64.so.2 at /lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
ld: warning: cannot find entry symbol _start; not setting start addres


Is there a way to fix it ??



_______________________________________________
Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
Site: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fsuricata-ids.org&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=EEtxMcZL%2fB0vLo6GJwCppYz0c5ngP%2fBWG7JDGHhi4Lo%3d | Support: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fsuricata-ids.org%2fsupport%2f&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=%2b2hrNcEvyoYFsrEjew0evRbI2WR1cTjv4n7XtdIS8Xg%3d
List: https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.openinfosecfoundation.org%2fmailman%2flistinfo%2foisf-users&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=iuMjEdIxMhAsq4p%2bbqdFAILbwSWkoPYK%2bQJJ5QX5j%2bM%3d
Suricata User Conference November 9-11 in Washington, DC: https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2foisfevents.net&data=01%7c01%7cdsprans%40emory.edu%7cc0352fa954384cf6ef4d08d32b68a99b%7ce004fb9cb0a4424fbcd0322606d5df38%7c1&sdata=qjcvB9CB6IdnletKZ3D9PjA7lUAIphFmQReYRHifTwo%3d

________________________________

This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).