Project

General

Profile

Actions

Bug #1729

closed

PCRE jit is disabled/blacklisted when it should not

Added by Peter Manev over 8 years ago. Updated over 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

If Suri is compiled towards a custom PCRE 8.38 "/opt/pcre" location on Debian Jessie .. during the configure stage - it still disables/blacklists PCRE jit since it finds that the one in the OS is 8.35 ...but it should not complain since it is pointed to a diff location where the pcre version is diff/better than 8.35.

Configure line -

./autogen.sh && ./configure  --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-pie --enable-geoip  --enable-lua --with-libpcre-includes=/opt/pcre/include/ --with-libpcre-libraries=/opt/pcre/lib/   --with-libjansson-includes=/usr/local/include/ --with-libjansson-libraries=/usr/local/lib/ --with-libnss-libraries=/usr/lib64 --with-libnss-includes=/usr/include/nss3 --with-libnspr-libraries=/usr/lib64 --with-libnspr-includes=/usr/include/nspr4

where pcre is compiled and installed in /opt/pcre - with the following config line -

./configure --prefix=/opt/pcre/ --enable-unicode-properties --enable-jit --enable-utf8 --enable-pcre16 --enable-pcre32--enable-pcregrep-libz --disable-static  && make clean && make -j && make install


/home/pevma/Work/Suricata/suricomp/oisf# ldd /usr/bin/suricata
    linux-vdso.so.1 (0x00007ffd8e339000)
    liblua5.1.so.0 => /usr/lib/x86_64-linux-gnu/liblua5.1.so.0 (0x00007fa8bbea9000)
    libhtp-0.5.18.so.1 => /usr/lib/x86_64-linux-gnu/libhtp-0.5.18.so.1 (0x00007fa8bbc8a000)
    libGeoIP.so.1 => /usr/lib/x86_64-linux-gnu/libGeoIP.so.1 (0x00007fa8bba5a000)
    libmagic.so.1 => /usr/lib/x86_64-linux-gnu/libmagic.so.1 (0x00007fa8bb83a000)
    libcap-ng.so.0 => /usr/lib/x86_64-linux-gnu/libcap-ng.so.0 (0x00007fa8bb634000)
    libpcap.so.0.8 => /usr/lib/x86_64-linux-gnu/libpcap.so.0.8 (0x00007fa8bb3f4000)
    libnet.so.1 => /usr/lib/x86_64-linux-gnu/libnet.so.1 (0x00007fa8bb1da000)
    libjansson.so.4 => /usr/lib/x86_64-linux-gnu/libjansson.so.4 (0x00007fa8bafcc000)
    libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fa8badaf000)
    libyaml-0.so.2 => /usr/lib/x86_64-linux-gnu/libyaml-0.so.2 (0x00007fa8bab90000)
    libpcre.so.1 => /opt/pcre/lib/libpcre.so.1 (0x00007fa8ba922000)
    libnss3.so => /usr/lib/x86_64-linux-gnu/libnss3.so (0x00007fa8ba5da000)
    libnssutil3.so => /usr/lib/x86_64-linux-gnu/libnssutil3.so (0x00007fa8ba3ae000)
    libsmime3.so => /usr/lib/x86_64-linux-gnu/libsmime3.so (0x00007fa8ba181000)
    libssl3.so => /usr/lib/x86_64-linux-gnu/libssl3.so (0x00007fa8b9f34000)
    libplds4.so => /usr/lib/x86_64-linux-gnu/libplds4.so (0x00007fa8b9d30000)
    libplc4.so => /usr/lib/x86_64-linux-gnu/libplc4.so (0x00007fa8b9b2b000)
    libnspr4.so => /usr/lib/x86_64-linux-gnu/libnspr4.so (0x00007fa8b98eb000)
    libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fa8b9540000)
    /lib64/ld-linux-x86-64.so.2 (0x00007fa8bc553000)
    libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fa8b923f000)
    libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fa8b903b000)
    libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007fa8b8e20000)
    librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007fa8b8c18000)
/home/pevma/Work/Suricata/suricomp/oisf#
root@DONPEDRO:/home/pevma/Work/Suricata/suricomp/oisf# /usr/bin/suricata --build-info
This is Suricata version 3.0dev (rev 53704ea)
Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LUA HAVE_LIBJANSSON TLS
SIMD support: SSE_4_2 SSE_4_1 SSE_3
Atomic intrisics: 1 2 4 8 16 byte(s)
64-bits, Little-endian architecture
GCC version 4.9.2, C version 199901
compiled with _FORTIFY_SOURCE=0
L1 cache line size (CLS)=64
thread local storage method: __thread
compiled with LibHTP v0.5.18, linked against LibHTP v0.5.18

Suricata Configuration:
  AF_PACKET support:                       yes
  PF_RING support:                         no
  NFQueue support:                         no
  NFLOG support:                           no
  IPFW support:                            no
  Netmap support:                          no
  DAG enabled:                             no
  Napatech enabled:                        no

  Unix socket enabled:                     yes
  Detection enabled:                       yes

  libnss support:                          yes
  libnspr support:                         yes
  libjansson support:                      yes
  hiredis support:                         no
  Prelude support:                         no
  PCRE jit:                                no, libpcre 8.35 blacklisted
  LUA support:                             yes
  libluajit:                               no
  libgeoip:                                yes
  Non-bundled htp:                         no
  Old barnyard2 support:                   no
  CUDA enabled:                            no

  Suricatasc install:                      yes

  Unit tests enabled:                      no
  Debug output enabled:                    no
  Debug validation enabled:                no
  Profiling enabled:                       no
  Profiling locks enabled:                 no
  Coccinelle / spatch:                     no

Generic build parameters:
  Installation prefix:                     /usr
  Configuration directory:                 /etc/suricata/
  Log directory:                           /var/log/suricata/

  --prefix                                 /usr
  --sysconfdir                             /etc
  --localstatedir                          /var

  Host:                                    x86_64-unknown-linux-gnu
  Compiler:                                gcc (exec name) / gcc (real)
  GCC Protect enabled:                     no
  GCC march native enabled:                yes
  GCC Profile enabled:                     no
  Position Independent Executable enabled: yes
  CFLAGS                                   -g -O2 -march=native
  PCAP_CFLAGS                               -I/usr/include
  SECCFLAGS                                
/home/pevma/Work/Suricata/suricomp/oisf#
Actions #1

Updated by Peter Manev over 8 years ago

  • Subject changed from PCRE jit disabled/blacklisted when it should not to PCRE jit is disabled/blacklisted when it should not
Actions #2

Updated by Andreas Herz over 8 years ago

  • Status changed from New to Closed
  • Target version set to 3.0.1RC1
Actions

Also available in: Atom PDF