[Snort-users] More Solaris Woes

Randal T. Rioux randy at ...13561...
Sat Sep 20 19:02:56 EDT 2008

Ok, this is strange. First, my setup:

Sun X1 - 400Mhz
Solaris 10 05/08
Snort 2.8.3
Libpcap 0.9.8

Problem: ./configure(ing) Snort 2.8.3 produces the following error:

..blah blah blah...
checking for pcap_datalink in -lpcap... no
checking pfring.h usability... no
checking pfring.h presence... no
checking for pfring.h... no
checking for pfring_open in -lpfring... no
checking for pfring_open in -lpcap... no

   ERROR!  Libpcap library/headers (libpcap.a (or .so)/pcap.h)
   not found, go get it from http://www.tcpdump.org
   or use the --with-libpcap-* options, if you have it installed
   in unusual place.  Also check if your libpcap depends on another
   shared library that may be installed in an unusual place

config.log shows this:

configure:23366: checking for pcap_datalink in -lpcap
configure:23401: gcc -o conftest -g -O2 -Wall -mcpu=v9   -DBSD_COMP
-D_REENTRANT  conftest.c -lpcap  -lm -lsocket -lnsl  >&5
Undefined                       first referenced
 symbol                             in file
ld: fatal: Symbol referencing errors. No output written to conftest
collect2: ld returned 1 exit status

Now for the oddity. This error only shows when using a source compiled
version of libpcap. If I use the Sunfreeware package, everything works
fine. My question: what would cause this error? Does anyone know the
configure flags used to create the Sunfreeware package? I'm not using any
at all and it compiles fine, but Snort does not like it!

As always, any help is greatly appreciated. Have a nice weekend.


More information about the Snort-users mailing list