chris.hellkvist at googlemail
May 2, 2012, 3:12 AM
Views: 1158
Permalink
|
|
Compiling Snort against PF_RING fails
|
|
Hi list,
after i got TNAPI running i try to compile the current Snort version
(2.9.2.2) against PF_RING, but this fails:
./configure --with-libpcap-includes=/usr/local/include
--with-libpcap-libraries=/usr/local/lib
--with-libpfring-includes=/usr/local/include
--with-libpfring-libraries=/usr/local/lib --enable-zlib
--enable-perfprofiling -enable-linux-smp-stats
ends up in:
checking for pcap_datalink in -lpcap... no
checking pfring.h usability... yes
checking pfring.h presence... yes
checking for pfring.h... yes
checking for pfring_open in -lpfring... no
checking for pfring_open in -lpcap... no
ERROR! Libpcap library/headers (libpcap.a (or .so)/pcap.h)
not found, go get it from http://www.tcpdump.org
or use the --with-libpcap-* options, if you have it installed
in unusual place. Also check if your libpcap depends on another
shared library that may be installed in an unusual place
The userland libs (pf_ring and libpcap) shipped with PF_RING are
installed on the machine:
~/snort-2.9.2.2$ ls -l /usr/local/lib/ | grep pcap
-rw-r--r-- 1 root root 401718 2012-05-02 11:58 libpcap.a
lrwxrwxrwx 1 root root 12 2012-05-02 11:58 libpcap.so -> libpcap.so.1
lrwxrwxrwx 1 root root 16 2012-05-02 11:58 libpcap.so.1 -> libpcap.so.1.1.1
-rwxr-xr-x 1 root root 363734 2012-05-02 11:58 libpcap.so.1.1.1
dth [at] ids-dus2-ded:~/snort-2.9.2.2$ ls -l /usr/local/lib/ | grep pfring
-rw-r--r-- 1 root root 174996 2012-05-02 11:53 libpfring.a
-rwxr-xr-x 1 root root 139603 2012-05-02 11:53 libpfring.so
~/snort-2.9.2.2$ ls -l /usr/local/include/
total 96
-rw-r--r-- 1 root root 4348 2012-04-27 12:41 daq_api.h
-rw-r--r-- 1 root root 6633 2012-04-27 12:41 daq_common.h
-rw-r--r-- 1 root root 3924 2012-04-27 12:41 daq.h
drwxr-xr-x 2 root root 4096 2012-05-02 11:58 pcap
-rw-r--r-- 1 root root 2393 2012-05-02 11:58 pcap-bpf.h
-rw-r--r-- 1 root root 2320 2012-05-02 11:58 pcap.h
-rw-r--r-- 1 root root 2125 2012-05-02 11:58 pcap-namedb.h
-rw-r--r-- 1 root root 17006 2012-05-02 11:53 pfring.h
-rw-r--r-- 1 root root 29739 2012-04-27 12:41 sfbpf_dlt.h
-rw-r--r-- 1 root root 6489 2012-04-27 12:41 sfbpf.h
Any ideas on that?
Thanks,
Chris
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|
Compiling Snort against PF_RING fails
