[Oisf-users] Getting error when running Suricata

[Jeremy MJ]

Interesting it compiled from source, but I think it's looking for the lib
in the wrong place after installing on your Ubuntu system (perhaps
something went wonky after make install). If you're able to share the
configure options you used, this would help troubleshoot too. I typically
don't work much with Ubuntu, but shouldn't libhs be in /usr/lib? If it's a
non-production environment, a copy of the file over to that directory to
see if it alleviates the problem would confirm this.

Re ldd. Try this: ldd /usr/bin/surictata
Or wherever the full path is to the surictata binary. This would be the
same thing the which command would return for ldd to check. It should list
shared libraries the binary uses with their respective paths.

Jeremy


On Nov 30, 2017 7:36 PM, "Leonard Jacobs" <ljacobs at netsecuris.com> wrote:

Ubuntu 16.04
Compiled Suricata after installing Hyperscan.
I followed the instructions in documentation.

Give me specifically what you want with ldd.  Better Example?

I have installed Suricata numerous times but never had this problem.  Can't
even run suricata --build-info without error.  After running ./configure I
saw that Hyperscan was enabled.

* From: * Jason Taylor <jtfas90 at gmail.com>
* To: * Leonard Jacobs <ljacobs at netsecuris.com>
* Cc: * <oisf-users at lists.openinfosecfoundation.org>
* Sent: * 11/30/2017 6:40 PM
* Subject: * Re: [Oisf-users] Getting error when running Suricata

Hi Leonard,

What OS is this running on?

How did suricata get installed?

How did hyperscan get installed?

Can you post the output of  'ldd $(which suricata)' ?

Thanks!

JT

On Nov 30, 2017 19:10, "Leonard Jacobs" <ljacobs at netsecuris.com> wrote:

I am getting the following error when running anything with suricata.  I am
not sure what it means.  I can see libhs.so.4 file in
/usr/local/lib/x86_64-linux-gnu/ directory.

suricata: error while loading shared libraries: libhs.so.4: cannot open
shared object file: No such file or directory


_______________________________________________
Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users

Conference: https://suricon.net
Trainings: https://suricata-ids.org/training/



_______________________________________________
Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users

Conference: https://suricon.net
Trainings: https://suricata-ids.org/training/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171130/126c4a13/attachment-0002.html>