[Oisf-users] suricata configure/compilation fails with --enable-pf_ring option

[Tapas Sarangi]

Thanks for a prompt response. I confirm, it compiles without errors with
suricata-3.1.

-T



On 7/5/16, 11:01 AM, "Oisf-users on behalf of Victor Julien"
<oisf-users-bounces at lists.openinfosecfoundation.org on behalf of
lists at inliniac.net> wrote:

>On 05-07-16 17:59, Tapas Sarangi wrote:
>> Hi,
>>
>> Following configure fails, while the same without the ‹enable-pf_ring
>> option works fine. I am using suricata-3.0.1.  All the dependency
>> libraries are available and have appropriate symbols. Thanks for any
>>help.
>
>Please try 3.1 or 3.0.2 instead. This should have been fixed in those
>releases.
>
>Cheers,
>Victor
>
>
>
>> configure --enable-gccprotect --enable-pie --disable-gccmarch-native
>> --disable-coccinelle --enable-nfqueue --enable-af-packet
>> *--enable-pfring* --with-libnspr-libraries=/usr/lib64
>> --with-libnspr-includes=/usr/include/nspr4
>> --with-libnss-includes=/usr/include/nss3 --enable-jansson --enable-geoip
>> --enable-lua
>>
>>
>>
>> # Configure/Compilation Error:
>> Š.
>> Š.
>>
>> checking cap-ng.h usability... yes
>>
>> checking cap-ng.h presence... yes
>>
>> checking for cap-ng.h... yes
>>
>> checking for capng_clear in -lcap-ng... no
>>
>>
>>    WARNING!  libcap-ng library not found, go get it
>>
>>    from
>>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3f
>>R7nSH_GHg&s=5&u=http%3a%2f%2fpeople%2eredhat%2ecom%2fsgrubb%2flibcap-ng%2
>>f
>>
>>    or your distribution:
>>
>>
>>    Ubuntu: apt-get install libcap-ng-dev
>>
>>    Fedora: yum install libcap-ng-devel
>>
>>
>>    Suricata will be built without support for dropping privs.
>>
>>
>> checking for libnspr... yes
>>
>> checking nspr.h usability... yes
>>
>> checking nspr.h presence... yes
>>
>> checking for nspr.h... yes
>>
>> checking for PR_GetCurrentThread in -lnspr4... no
>>
>>
>>    ERROR!  libnspr library not found, go get it
>>
>>    from Mozilla or your distribution:
>>
>>
>>    Ubuntu: apt-get install libnspr4-dev
>>
>>    Fedora: yum install nspr-devel
>>
>>
>> Š..
>> Š..
>> Š..
>>
>> # Check for PR_GetCurrentThread
>>
>> ]# nm -D /usr/lib64/libnspr4.so | grep PR_GetCurrentThread
>>
>> 0000000000028f10 T PR_GetCurrentThread
>>
>>
>> # Check for capng_clear
>>
>> ]# nm -D /usr/lib64/libcap-ng.so | grep clear
>>
>> 0000000000002960 T capng_clear
>>
>>
>> ------------------------------------------------------------------------
>>
>> This transmission may contain information that is privileged,
>> confidential, and/or exempt from disclosure under applicable law. If you
>> are not the intended recipient, you are hereby notified that any
>> disclosure, copying, distribution, or use of the information contained
>> herein (including any reliance thereon) is strictly prohibited. If you
>> received this transmission in error, please immediately contact the
>> sender and destroy the material in its entirety, whether in electronic
>> or hard copy format.
>>
>>
>> _______________________________________________
>> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>> Site:
>>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3f
>>RrkTCjJGQ&s=5&u=http%3a%2f%2fsuricata-ids%2eorg | Support:
>>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3f
>>RmxT3jPEQ&s=5&u=http%3a%2f%2fsuricata-ids%2eorg%2fsupport%2f
>> List:
>>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3f
>>UzhTCvMEQ&s=5&u=https%3a%2f%2flists%2eopeninfosecfoundation%2eorg%2fmailm
>>an%2flistinfo%2foisf-users
>> Suricata User Conference November 9-11 in Washington, DC:
>>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3f
>>Ru0QiqZSg&s=5&u=http%3a%2f%2foisfevents%2enet
>>
>
>
>--
>---------------------------------------------
>Victor Julien
>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3fR
>rhHyvJHw&s=5&u=http%3a%2f%2fwww%2einliniac%2enet%2f
>PGP:
>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3fU
>zmGijKHA&s=5&u=http%3a%2f%2fwww%2einliniac%2enet%2fvictorjulien%2easc
>---------------------------------------------
>
>_______________________________________________
>Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>Site:
>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3fR
>rkTCjJGQ&s=5&u=http%3a%2f%2fsuricata-ids%2eorg | Support:
>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3fR
>mxT3jPEQ&s=5&u=http%3a%2f%2fsuricata-ids%2eorg%2fsupport%2f
>List:
>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3fU
>zhTCvMEQ&s=5&u=https%3a%2f%2flists%2eopeninfosecfoundation%2eorg%2fmailman
>%2flistinfo%2foisf-users
>Suricata User Conference November 9-11 in Washington, DC:
>http://scanmail.trustwave.com/?c=4062&d=19n714r7xTlPPMBrKDgmtJkHQyHaw-U3fR
>u0QiqZSg&s=5&u=http%3a%2f%2foisfevents%2enet


________________________________

This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.