Problem running #sudo suricata-update

  • Suricata version: Version Installed by following the ‘Quick Start Guide’ page
  • Ubuntu 24.4
  • Instllation folowing the steps in ‘Quick Start Guide’ page

Hello,

I’m trying to running the #sudo suricata-update, but i’ve been receiving the following error:

Suricata is running, but I can’t keep going on the steps because of this erros, and I don’t know how to solve it.

Trying running sudo ldconfig, then try suricata --build-info.

Just tried…same error
image

I assume you installed from the PPA? What is the output of ldd /usr/bin/suricata?

Yeah,

Installed from the PPA.

The output:

This usually happens when Suricata is upgraded, but libhtp was not, but this usually doesn’t happen with the PPA, and your output looks good. Or there was an existing from source installation, and new install from packages or some other format.

Without more input from someone who knows more about the PPA, and packaging on Ubuntu (I unfortunately don’t), I’d try the following:

  • remove Suricata with apt
  • Run find /usr/lib* | grep htp, if libhtp is still there delete it.
  • Run find /usr/local/lib* | grep htp, again, remove if libhtp is there

Or maybe someone else will jump in. All I can confirm is that on a fresh Ubuntu 24.04 install, the PPA appears to install fine.

1 Like

Jason,

Thank you so much! It worked
The output when I did like you suggested:

Thanks