Task #8077: plugins: ndpi 5.0.0 not supported - Suricata - Open Information Security Foundation

Actions

Copy link

Task #8077

open

plugins: ndpi 5.0.0 not supported

Added by jun yuan 2 months ago. Updated about 7 hours ago.

Status:

Feedback

Priority:

Normal

Assignee:

Community Ticket

Target version:

TBD

Effort:

Difficulty:

Label:

Description

Which nDPI version should be used for installation?

Compile using the following command：
./configure --enable-nfqueue --enable-ndpi --with-ndpi=/root/ndpisuri/nDPI-dev

ERROR:
See the attachment

Files

Download all files

20251104-094241.png (95.2 KB) 20251104-094241.png	ERROR	jun yuan, 11/04/2025 01:44 AM
d314b8ad-f0bf-453b-b1ea-88753e8f27e0.png (26.5 KB) d314b8ad-f0bf-453b-b1ea-88753e8f27e0.png	ERROR	jun yuan, 11/05/2025 09:07 AM
20251106-083819.png (21.2 KB) 20251106-083819.png	ERROR	jun yuan, 11/06/2025 12:41 AM
20251106-083701.png (72 KB) 20251106-083701.png	ERROR	jun yuan, 11/06/2025 12:41 AM

Actions

Copy link

Updated by Jason Ish 2 months ago

Assignee set to Jason Ish

Our CI currently tests 4.12. I'm just doing a test now with 4.14. It looks like nDPI 5.0 was just released, however with breaking changes.

Actions

Copy link

Updated by jun yuan 2 months ago

File d314b8ad-f0bf-453b-b1ea-88753e8f27e0.png d314b8ad-f0bf-453b-b1ea-88753e8f27e0.png added

Jason Ish wrote in #note-1:

Our CI currently tests 4.12. I'm just doing a test now with 4.14. It looks like nDPI 5.0 was just released, however with breaking changes.

TKS.
Using version 4.12, there is still an error during installation

ERROR:
See the attachment

Actions

Copy link

Updated by Jason Ish 2 months ago

We test 4.12 in CI, and have a PR upgrading that test to 4.14, and all seems OK. You can see our GitHub action here:

https://github.com/OISF/suricata/blob/main/.github/workflows/builds.yml#L722

Can you think of anything else that might be influencing this on your system? I tested with old headers in the /usr/local/include, and when building in-tree it does appear to correctly pickup the headers it is being built from.

Testing our main branch, as well as a build from the 8.0.1 release package.

Actions

Copy link Download all files

Updated by jun yuan 2 months ago · Edited

File 20251106-083819.png 20251106-083819.png added
File 20251106-083701.png 20251106-083701.png added

TKS.
I searched up and found 2 more errors. Are they related to the final error?

cargo 1.87.0
suricata-8.0.1
nDPI-4.12-stable

ERROR:
See the attachment

--------------
I have corrected the code based on the error, and now it can be installed

EIDT: /suricata-8.0.1/plugins/ndpi/ndpi.c 533 line
const SCPlugin PluginRegistration = {
.version = 2048,
.suricata_version = "8.0.1",

Actions

Copy link

Updated by Jason Ish 17 days ago

Tracker changed from Support to Task
Subject changed from NDPI plugins cannot be installed to plugins: ndpi 5.0.0 not supported
Assignee changed from Jason Ish to OISF Dev
Target version set to TBD
Affected Versions deleted (~~git main~~)