Package Details: suricata 7.0.7-1

Git Clone URL: https://aur.archlinux.org/suricata.git (read-only, click to copy)
Package Base: suricata
Description: A high performance Network IDS, IPS and Network Security Monitoring engine
Upstream URL: https://suricata.io/
Licenses: GPL2
Conflicts: suricata-nfqueue
Submitter: Dragonlord
Maintainer: jskier (amish)
Last Packager: jskier
Votes: 32
Popularity: 0.000065
First Submitted: 2010-01-03 21:02 (UTC)
Last Updated: 2024-11-04 20:59 (UTC)

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 Next › Last »

k96hkh commented on 2022-12-13 13:44 (UTC) (edited on 2022-12-13 13:47 (UTC) by k96hkh)

Hi,

Wanted to test Suricata and ran into a few problems, first of all I'm guessing llvm should be an dependency since I had to manually add in order for the makepkg to pass this:


checking for llc-14.0... no
checking for llc-14... no
checking for llc... no
configure: error: unable to find any of llc-14.0 llc-14 llc needed to build ebpf files
==> FEL:  Ett fel uppstod i build().
    Avbryter...

Then I get stuck on this:

...
  CC       util-ebpf.o
util-ebpf.c: In function ‘EBPFLoadFile’:
util-ebpf.c:375:17: error: implicit declaration of function ‘bpf_program__set_socket_filter’; did you mean ‘bpf_program__set_log_level’? [-Werror=implicit-function-declaration]
  375 |                 bpf_program__set_socket_filter(bpfprog);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                 bpf_program__set_log_level
util-ebpf.c:377:17: error: implicit declaration of function ‘bpf_program__set_xdp’; did you mean ‘bpf_program__set_type’? [-Werror=implicit-function-declaration]
  377 |                 bpf_program__set_xdp(bpfprog);
      |                 ^~~~~~~~~~~~~~~~~~~~
      |                 bpf_program__set_type
cc1: some warnings being treated as errors
make[2]:  [Makefile:2703: util-ebpf.o] Error 1
make[2]: Leaving directory '/home/henrik/build/suricata/src/suricata-6.0.9/src'
make[1]:  [Makefile:1967: all] Error 2
make[1]: Leaving directory '/home/henrik/build/suricata/src/suricata-6.0.9/src'
make: *** [Makefile:492: all-recursive] Error 1
==> ERROR: A failure occurred in build().
    Aborting...

I'm assuming it is not an upstream bug since it is a release package so I figured it has something to do with the cflags and gcc in arch but I'm not smart enough to solve it.

Any idea?

Cheers!

omgold commented on 2022-05-09 06:40 (UTC)

logrotate doesn't work for me. The reason seems to be that logrotate expects the pidfile at /run/suricate.pid while in the systemd unit it is set to /run/suricata/suricate.pid.

amish commented on 2021-06-23 00:53 (UTC)

@jskier I would be glad to co-maintain. Thanks

jskier commented on 2021-06-22 13:29 (UTC)

@amish, credit given, if you want to co-maintain I'm happy to add you!

Also, v6 does not compile for me, I will post a link to output on your package. Also trying different options for rust. I noticed on the suricata forums this is a known issue.

amish commented on 2021-06-22 04:50 (UTC)

Ok. I see that you have already copied a few bits from it. Although without any credit!!

amish commented on 2021-06-22 04:44 (UTC)

See my AUR package https://aur.archlinux.org/packages/suricata-nfqueue/

Suricate 6.0.2 compiles fine for me.

jskier commented on 2021-06-21 17:32 (UTC) (edited on 2021-06-22 13:24 (UTC) by jskier)

Updated to old stable 5. Version 6 has issue with rust library and won't compile as of recent (looking into patch options).

Conflicts with python-sphinx, as currently there is no easy way to build suricata without the docs otherwise (there is discussion about add this in the future).

Suggestions are welcome; mostly meant for testing captures with or running daemon with af-packet.

Credit to amish for the nfqueue package, some of his work worked on this.

jskier commented on 2021-06-20 16:18 (UTC)

Is this package going to be updated? Otherwise please orphan it so someone else may pick up.

i.further commented on 2020-12-12 05:40 (UTC)

gpg key is in its website. https://www.openinfosecfoundation.org/downloads/OISF.pub

Dragonlord commented on 2020-10-19 13:14 (UTC)

You might want to read through this for the GPG error: https://wiki.archlinux.org/index.php/Makepkg#Signature_checking

« First ‹ Previous 1 2 3 4 5 6 Next › Last »