Suricata

[hscadmin@infrasec-ids02 suricata-2.0.7]$ sudo ./configure && make && make install-rules

checking for a BSD-compatible install... /bin/install -c

checking whether build environment is sane... yes

checking for a thread-safe mkdir -p... /bin/mkdir -p

checking for gawk... gawk

checking whether make sets $(MAKE)... yes

checking whether make supports nested variables... yes

checking for style of include used by make... GNU

checking for gcc... gcc

checking whether the C compiler works... yes

checking for C compiler default output file name... a.out

checking for suffix of executables...

checking whether we are cross compiling... no

checking for suffix of object files... o

checking whether we are using the GNU C compiler... yes

checking whether gcc accepts -g... yes

checking for gcc option to accept ISO C89... none needed

checking whether gcc understands -c and -o together... yes

checking dependency style of gcc... gcc3

checking for gcc option to accept ISO C99... -std=gnu99

checking build system type... x86_64-unknown-linux-gnu

checking host system type... x86_64-unknown-linux-gnu

checking how to print strings... printf

checking for a sed that does not truncate output... /bin/sed

checking for grep that handles long lines and -e... /bin/grep

checking for egrep... /bin/grep -E

checking for fgrep... /bin/grep -F

checking for ld used by gcc -std=gnu99... /bin/ld

checking if the linker (/bin/ld) is GNU ld... yes

checking for BSD- or MS-compatible name lister (nm)... /bin/nm -B

checking the name lister (/bin/nm -B) interface... BSD nm

checking whether ln -s works... yes

checking the maximum length of command line arguments... 1572864

checking whether the shell understands some XSI constructs... yes

checking whether the shell understands "+="... yes

checking how to convert x86_64-unknown-linux-gnu file names to x86_64-unknown-linux-gnu format... func_convert_file_noop

checking how to convert x86_64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop

checking for /bin/ld option to reload object files... -r

checking for objdump... objdump

checking how to recognize dependent libraries... pass_all

checking for dlltool... no

checking how to associate runtime and link libraries... printf %s\n

checking for ar... ar

checking for archiver @FILE support... @

checking for strip... strip

checking for ranlib... ranlib

checking command to parse /bin/nm -B output from gcc -std=gnu99 object... ok

checking for sysroot... no

checking for mt... no

checking if : is a manifest tool... no

checking how to run the C preprocessor... gcc -std=gnu99 -E

checking for ANSI C header files... yes

checking for sys/types.h... yes

checking for sys/stat.h... yes

checking for stdlib.h... yes

checking for string.h... yes

checking for memory.h... yes

checking for strings.h... yes

checking for inttypes.h... yes

checking for stdint.h... yes

checking for unistd.h... yes

checking for dlfcn.h... yes

checking for objdir... .libs

checking if gcc -std=gnu99 supports -fno-rtti -fno-exceptions... no

checking for gcc -std=gnu99 option to produce PIC... -fPIC -DPIC

checking if gcc -std=gnu99 PIC flag -fPIC -DPIC works... yes

checking if gcc -std=gnu99 static flag -static works... no

checking if gcc -std=gnu99 supports -c -o file.o... yes

checking if gcc -std=gnu99 supports -c -o file.o... (cached) yes

checking whether the gcc -std=gnu99 linker (/bin/ld -m elf_x86_64) supports shared libraries... yes

checking whether -lc should be explicitly linked in... no

checking dynamic linker characteristics... GNU/Linux ld.so

checking how to hardcode library paths into programs... immediate

checking whether stripping libraries is possible... yes

checking if libtool supports shared libraries... yes

checking whether to build shared libraries... yes

checking whether to build static libraries... yes

checking for pkg-config... /bin/pkg-config

checking pkg-config is at least version 0.21... yes

checking gcc version... 4.8.2

checking for gawk... (cached) gawk

checking for gcc... (cached) gcc

checking whether we are using the GNU C compiler... (cached) yes

checking whether gcc accepts -g... (cached) yes

checking for gcc option to accept ISO C89... (cached) none needed

checking whether gcc understands -c and -o together... (cached) yes

checking dependency style of gcc... (cached) gcc3

checking how to run the C preprocessor... gcc -std=gnu99 -E

checking whether ln -s works... yes

checking whether make sets $(MAKE)... (cached) yes

checking for pkg-config... /bin/pkg-config

checking for python... /bin/python

checking for wget... /bin/wget

checking arpa/inet.h usability... yes

checking arpa/inet.h presence... yes

checking for arpa/inet.h... yes

checking assert.h usability... yes

checking assert.h presence... yes

checking for assert.h... yes

checking ctype.h usability... yes

checking ctype.h presence... yes

checking for ctype.h... yes

checking errno.h usability... yes

checking errno.h presence... yes

checking for errno.h... yes

checking fcntl.h usability... yes

checking fcntl.h presence... yes

checking for fcntl.h... yes

checking for inttypes.h... (cached) yes

checking getopt.h usability... yes

checking getopt.h presence... yes

checking for getopt.h... yes

checking limits.h usability... yes

checking limits.h presence... yes

checking for limits.h... yes

checking netdb.h usability... yes

checking netdb.h presence... yes

checking for netdb.h... yes

checking netinet/in.h usability... yes

checking netinet/in.h presence... yes

checking for netinet/in.h... yes

checking poll.h usability... yes

checking poll.h presence... yes

checking for poll.h... yes

checking sched.h usability... yes

checking sched.h presence... yes

checking for sched.h... yes

checking signal.h usability... yes

checking signal.h presence... yes

checking for signal.h... yes

checking stdarg.h usability... yes

checking stdarg.h presence... yes

checking for stdarg.h... yes

checking for stdint.h... (cached) yes

checking stdio.h usability... yes

checking stdio.h presence... yes

checking for stdio.h... yes

checking for stdlib.h... (cached) yes

checking for string.h... (cached) yes

checking sys/ioctl.h usability... yes

checking sys/ioctl.h presence... yes

checking for sys/ioctl.h... yes

checking syslog.h usability... yes

checking syslog.h presence... yes

checking for syslog.h... yes

checking sys/prctl.h usability... yes

checking sys/prctl.h presence... yes

checking for sys/prctl.h... yes

checking sys/socket.h usability... yes

checking sys/socket.h presence... yes

checking for sys/socket.h... yes

checking for sys/stat.h... (cached) yes

checking sys/syscall.h usability... yes

checking sys/syscall.h presence... yes

checking for sys/syscall.h... yes

checking sys/time.h usability... yes

checking sys/time.h presence... yes

checking for sys/time.h... yes

checking time.h usability... yes

checking time.h presence... yes

checking for time.h... yes

checking for unistd.h... (cached) yes

checking for sys/ioctl.h... (cached) yes

checking linux/if_ether.h usability... yes

checking linux/if_ether.h presence... yes

checking for linux/if_ether.h... yes

checking linux/if_packet.h usability... yes

checking linux/if_packet.h presence... yes

checking for linux/if_packet.h... yes

checking linux/filter.h usability... yes

checking linux/filter.h presence... yes

checking for linux/filter.h... yes

checking linux/ethtool.h usability... yes

checking linux/ethtool.h presence... yes

checking for linux/ethtool.h... yes

checking linux/sockios.h usability... yes

checking linux/sockios.h presence... yes

checking for linux/sockios.h... yes

checking for sys/socket.h... (cached) yes

checking for net/if.h... yes

checking for sys/mman.h... yes

checking for linux/if_arp.h... yes

checking for windows.h... no

checking for winsock2.h... no

checking for ws2tcpip.h... no

checking for w32api/wtypes.h... no

checking for w32api/winbase.h... no

checking for inline... inline

checking for pid_t... yes

checking for size_t... yes

checking for int32_t... yes

checking for uint16_t... yes

checking for uint32_t... yes

checking for uint64_t... yes

checking for uint8_t... yes

checking for stdbool.h that conforms to C99... yes

checking for _Bool... yes

checking for stdlib.h... (cached) yes

checking for GNU libc compatible malloc... yes

checking for stdlib.h... (cached) yes

checking for GNU libc compatible realloc... yes

checking for gettimeofday... yes

checking for memset... yes

checking for strcasecmp... yes

checking for strchr... yes

checking for strdup... yes

checking for strerror... yes

checking for strncasecmp... yes

checking for strtol... yes

checking for strtoul... yes

checking for memchr... yes

checking for memrchr... yes

checking for strlcpy... no

checking for strlcat... no

checking for special C compiler options needed for large files... no

checking for _FILE_OFFSET_BITS value needed for large files... no

checking host os... installation for x86_64-unknown-linux-gnu OS... ok

checking for thread local storage __thread support... yes

checking checking if gcc supports -march=native... yes

checking for spatch... no

Warning! spatch not found, you will not be

able to run code checking with coccinelle

get it from http://coccinelle.lip6.fr

or install from your distribution

checking for Mpipe... no

checking pcre.h usability... yes

checking pcre.h presence... yes

checking for pcre.h... yes

checking for pcre_get_substring in -lpcre... yes

checking for pcre_dfa_exec in -lpcre... yes

checking for PCRE JIT support... yes

checking for PCRE JIT support usability... yes

checking yaml.h usability... yes

checking yaml.h presence... yes

checking for yaml.h... yes

checking for yaml_parser_initialize in -lyaml... yes

checking for pthread_create in -lpthread... yes

checking jansson.h usability... yes

checking jansson.h presence... yes

checking for jansson.h... yes

checking for json_dump_callback in -ljansson... yes

checking for nfnl_fd in -lnfnetlink... yes

checking for libnet.h version 1.1.x... yes

checking for libnet_write in -lnet... yes

checking for libnet_build_icmpv6_unreach in -lnet... yes

checking pcap.h usability... yes

checking pcap.h presence... yes

checking for pcap.h... yes

checking for pcap.h... (cached) yes

checking pcap/pcap.h usability... yes

checking pcap/pcap.h presence... yes

checking for pcap/pcap.h... yes

checking pcap/bpf.h usability... yes

checking pcap/bpf.h presence... yes

checking for pcap/bpf.h... yes

checking for pcap_open_live in -lpcap... yes

checking for pcap_activate in -lpcap... yes

checking for pcap-config... /bin/pcap-config

checking for pcap_set_buffer_size in -lpcap... yes

checking whether TPACKET_V2 is declared... yes

checking whether PACKET_FANOUT is declared... yes

checking iconv.h usability... yes

checking iconv.h presence... yes

checking for iconv.h... yes

checking for libiconv_close in -liconv... no

checking cap-ng.h usability... yes

checking cap-ng.h presence... yes

checking for cap-ng.h... yes

checking for capng_clear in -lcap-ng... yes

checking for libnspr... yes

checking nspr.h usability... yes

checking nspr.h presence... yes

checking for nspr.h... yes

checking for PR_GetCurrentThread in -lnspr4... yes

checking for libnss... yes

checking sechash.h usability... yes

checking sechash.h presence... yes

checking for sechash.h... yes

checking for HASH_Begin in -lnss3... yes

checking magic.h usability... yes

checking magic.h presence... yes

checking for magic.h... yes

checking for magic_open in -lmagic... yes

checking for getconf... /bin/getconf

checking for git... no

checking that generated files are newer than configure... done

configure: creating ./config.status

config.status: creating Makefile

config.status: creating src/Makefile

config.status: creating qa/Makefile

config.status: creating qa/coccinelle/Makefile

config.status: creating rules/Makefile

config.status: creating doc/Makefile

config.status: creating contrib/Makefile

config.status: creating contrib/file_processor/Makefile

config.status: creating contrib/file_processor/Action/Makefile

config.status: creating contrib/file_processor/Processor/Makefile

config.status: creating contrib/tile_pcie_logd/Makefile

config.status: creating suricata.yaml

config.status: creating scripts/Makefile

config.status: creating scripts/suricatasc/Makefile

config.status: creating scripts/suricatasc/suricatasc

config.status: creating config.h

config.status: config.h is unchanged

config.status: executing depfiles commands

config.status: executing libtool commands

=== configuring in libhtp (/home/hscadmin/suricata-2.0.7/libhtp)

configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr/local' --cache-file=/dev/null --srcdir=.

checking for a BSD-compatible install... /bin/install -c

checking whether build environment is sane... yes

checking for a thread-safe mkdir -p... /bin/mkdir -p

checking for gawk... gawk

checking whether make sets $(MAKE)... yes

checking whether make supports nested variables... yes

checking for gcc... gcc

checking whether the C compiler works... yes

checking for C compiler default output file name... a.out

checking for suffix of executables...

checking whether we are cross compiling... no

checking for suffix of object files... o

checking whether we are using the GNU C compiler... yes

checking whether gcc accepts -g... yes

checking for gcc option to accept ISO C89... none needed

checking whether gcc understands -c and -o together... yes

checking for style of include used by make... GNU

checking dependency style of gcc... gcc3

checking for g++... no

checking for c++... no

checking for gpp... no

checking for aCC... no

checking for CC... no

checking for cxx... no

checking for cc++... no

checking for cl.exe... no

checking for FCC... no

checking for KCC... no

checking for RCC... no

checking for xlC_r... no

checking for xlC... no

checking whether we are using the GNU C++ compiler... no

checking whether g++ accepts -g... no

checking dependency style of g++... none

checking build system type... x86_64-unknown-linux-gnu

checking host system type... x86_64-unknown-linux-gnu

checking how to print strings... printf

checking for a sed that does not truncate output... /bin/sed

checking for grep that handles long lines and -e... /bin/grep

checking for egrep... /bin/grep -E

checking for fgrep... /bin/grep -F

checking for ld used by gcc... /bin/ld

checking if the linker (/bin/ld) is GNU ld... yes

checking for BSD- or MS-compatible name lister (nm)... /bin/nm -B

checking the name lister (/bin/nm -B) interface... BSD nm

checking whether ln -s works... yes

checking the maximum length of command line arguments... 1572864

checking whether the shell understands some XSI constructs... yes

checking whether the shell understands "+="... yes

checking how to convert x86_64-unknown-linux-gnu file names to x86_64-unknown-linux-gnu format... func_convert_file_noop

checking how to convert x86_64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop

checking for /bin/ld option to reload object files... -r

checking for objdump... objdump

checking how to recognize dependent libraries... pass_all

checking for dlltool... no

checking how to associate runtime and link libraries... printf %s\n

checking for ar... ar

checking for archiver @FILE support... @

checking for strip... strip

checking for ranlib... ranlib

checking command to parse /bin/nm -B output from gcc object... ok

checking for sysroot... no

checking for mt... no

checking if : is a manifest tool... no

checking how to run the C preprocessor... gcc -E

checking for ANSI C header files... yes

checking for sys/types.h... yes

checking for sys/stat.h... yes

checking for stdlib.h... yes

checking for string.h... yes

checking for memory.h... yes

checking for strings.h... yes

checking for inttypes.h... yes

checking for stdint.h... yes

checking for unistd.h... yes

checking for dlfcn.h... yes

checking for objdir... .libs

checking if gcc supports -fno-rtti -fno-exceptions... no

checking for gcc option to produce PIC... -fPIC -DPIC

checking if gcc PIC flag -fPIC -DPIC works... yes

checking if gcc static flag -static works... no

checking if gcc supports -c -o file.o... yes

checking if gcc supports -c -o file.o... (cached) yes

checking whether the gcc linker (/bin/ld -m elf_x86_64) supports shared libraries... yes

checking whether -lc should be explicitly linked in... no

checking dynamic linker characteristics... GNU/Linux ld.so

checking how to hardcode library paths into programs... immediate

checking whether stripping libraries is possible... yes

checking if libtool supports shared libraries... yes

checking whether to build shared libraries... yes

checking whether to build static libraries... yes

checking whether build environment is sane... yes

checking for strlcpy... no

checking for strlcat... no

checking zlib.h usability... yes

checking zlib.h presence... yes

checking for zlib.h... yes

checking for inflate in -lz... yes

checking OS... Linux

checking for ld used by GCC... /bin/ld -m elf_x86_64

checking if the linker (/bin/ld -m elf_x86_64) is GNU ld... yes

checking for shared library run path origin... done

checking for iconv... yes

checking for working iconv... yes

checking for iconv declaration...

extern size_t iconv (iconv_t cd, char * *inbuf, size_t *inbytesleft, char * *outbuf, size_t *outbytesleft);

checking for gcc support of -Wstrict-overflow=1... yes

checking for gcc support of stack smashing protection... yes

checking for gcc support of FORTIFY_SOURCE... yes

checking for gcc support of -Wformat -Wformat-security... yes

checking for doxygen... no

checking for lcov... no

checking that generated files are newer than configure... done

checking that generated files are newer than configure... done

configure: creating ./config.status

config.status: creating htp/htp_version.h

config.status: creating Makefile

config.status: creating htp.pc

config.status: creating htp/Makefile

config.status: creating test/Makefile

config.status: creating docs/Makefile

config.status: creating config.h

config.status: config.h is unchanged

config.status: executing depfiles commands

config.status: executing libtool commands

Suricata Configuration:

AF_PACKET support: yes

PF_RING support: no

NFQueue support: no

NFLOG support: no

IPFW support: no

DAG enabled: no

Napatech enabled: no

Unix socket enabled: yes

Detection enabled: yes

libnss support: yes

libnspr support: yes

libjansson support: yes

Prelude support: no

PCRE jit: yes

LUA support: no

libluajit: no

libgeoip: no

Non-bundled htp: no

Old barnyard2 support: no

CUDA enabled: no

Suricatasc install: yes

Unit tests enabled: no

Debug output enabled: no

Debug validation enabled: no

Profiling enabled: no

Profiling locks enabled: no

Coccinelle / spatch: no

Generic build parameters:

Installation prefix (--prefix): /usr/local

Configuration directory (--sysconfdir): /usr/local/etc/suricata/

Log directory (--localstatedir) : /usr/local/var/log/suricata/

Host: x86_64-unknown-linux-gnu

GCC binary: gcc

GCC Protect enabled: no

GCC march native enabled: yes

GCC Profile enabled: no

To build and install run 'make' and 'make install'.

You can run 'make install-conf' if you want to install initial configuration

files to /usr/local/etc/suricata/. Running 'make install-full' will install configuration

and rules and provide you a ready-to-run suricata.

To install Suricata into /usr/bin/suricata, have the config in

/etc/suricata and use /var/log/suricata as log dir, use:

./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/

make all-recursive

make[1]: Entering directory `/home/hscadmin/suricata-2.0.7'

Making all in libhtp

make[2]: Entering directory `/home/hscadmin/suricata-2.0.7/libhtp'

make all-recursive

make[3]: Entering directory `/home/hscadmin/suricata-2.0.7/libhtp'

Making all in htp

make[4]: Entering directory `/home/hscadmin/suricata-2.0.7/libhtp/htp'

/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -O2 -I.. -I../htp -D_GNU_SOURCE -g -Wall -Wextra -std=gnu99 -pedantic -Wextra -Wno-missing-field-initializers -Wshadow -Wpointer-arith -Wstrict-prototypes -Wmissing-prototypes -Wno-unused-parameter -O2 -Wstrict-overflow=1 -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -MT htp_config.lo -MD -MP -MF .deps/htp_config.Tpo -c -o htp_config.lo htp_config.c

libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -O2 -I.. -I../htp -D_GNU_SOURCE -g -Wall -Wextra -std=gnu99 -pedantic -Wextra -Wno-missing-field-initializers -Wshadow -Wpointer-arith -Wstrict-prototypes -Wmissing-prototypes -Wno-unused-parameter -O2 -Wstrict-overflow=1 -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -MT htp_config.lo -MD -MP -MF .deps/htp_config.Tpo -c htp_config.c -fPIC -DPIC -o .libs/htp_config.o

htp_config.c:896:1: fatal error: opening dependency file .deps/htp_config.Tpo: Permission denied

}

^

compilation terminated.

make[4]: *** [htp_config.lo] Error 1

make[4]: Leaving directory `/home/hscadmin/suricata-2.0.7/libhtp/htp'

make[3]: *** [all-recursive] Error 1

make[3]: Leaving directory `/home/hscadmin/suricata-2.0.7/libhtp'

make[2]: *** [all] Error 2

make[2]: Leaving directory `/home/hscadmin/suricata-2.0.7/libhtp'

make[1]: *** [all-recursive] Error 1

make[1]: Leaving directory `/home/hscadmin/suricata-2.0.7'

make: *** [all] Error 2

[hscadmin@infrasec-ids02 suricata-2.0.7]$