[Oisf-users] suricata configure/compilation fails with --enable-pf_ring option

Tapas Sarangi TSarangi at trustwave.com
Tue Jul 5 15:59:52 UTC 2016


Hi,

Following configure fails, while the same without the -enable-pf_ring option works fine. I am using suricata-3.0.1.  All the dependency libraries are available and have appropriate symbols. Thanks for any help.


configure --enable-gccprotect --enable-pie --disable-gccmarch-native --disable-coccinelle --enable-nfqueue --enable-af-packet --enable-pfring --with-libnspr-libraries=/usr/lib64 --with-libnspr-includes=/usr/include/nspr4 --with-libnss-includes=/usr/include/nss3 --enable-jansson --enable-geoip --enable-lua


# Configure/Compilation Error:
....
....

checking cap-ng.h usability... yes

checking cap-ng.h presence... yes

checking for cap-ng.h... yes

checking for capng_clear in -lcap-ng... no


   WARNING!  libcap-ng library not found, go get it

   from http://people.redhat.com/sgrubb/libcap-ng/

   or your distribution:


   Ubuntu: apt-get install libcap-ng-dev

   Fedora: yum install libcap-ng-devel


   Suricata will be built without support for dropping privs.


checking for libnspr... yes

checking nspr.h usability... yes

checking nspr.h presence... yes

checking for nspr.h... yes

checking for PR_GetCurrentThread in -lnspr4... no


   ERROR!  libnspr library not found, go get it

   from Mozilla or your distribution:


   Ubuntu: apt-get install libnspr4-dev

   Fedora: yum install nspr-devel

.....
.....
.....

# Check for PR_GetCurrentThread

]# nm -D /usr/lib64/libnspr4.so | grep PR_GetCurrentThread

0000000000028f10 T PR_GetCurrentThread


# Check for capng_clear

]# nm -D /usr/lib64/libcap-ng.so | grep clear

0000000000002960 T capng_clear

________________________________

This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160705/1fb8edcd/attachment-0001.html>


More information about the Oisf-users mailing list