root@andi:/opt/code/suricata-4.1.2# ./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/ --enable-hiredis LIBS="-lssl -lcrypto" checking whether make supports nested variables... yes checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking for style of include used by make... GNU checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking dependency style of gcc... gcc3 checking for gcc option to accept ISO C99... none needed checking build system type... aarch64-unknown-linux-gnu checking host system type... aarch64-unknown-linux-gnu checking how to print strings... printf checking for a sed that does not truncate output... /bin/sed checking for grep that handles long lines and -e... /bin/grep checking for egrep... /bin/grep -E checking for fgrep... /bin/grep -F checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 1572864 checking how to convert aarch64-unknown-linux-gnu file names to aarch64-unknown-linux-gnu format... func_convert_file_noop checking how to convert aarch64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop checking for /usr/bin/ld option to reload object files... -r checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for ar... ar checking for archiver @FILE support... @ checking for strip... strip checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ok checking for sysroot... no checking for a working dd... /bin/dd checking how to truncate binary pipes... /bin/dd bs=4096 count=1 checking for mt... mt checking if mt is a manifest tool... no checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... yes checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking whether GCC or Clang is our compiler... gcc checking gcc version... 6.3.0 checking for gawk... (cached) gawk checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking whether gcc understands -c and -o together... (cached) yes checking dependency style of gcc... (cached) gcc3 checking how to run the C preprocessor... gcc -E checking whether ln -s works... yes checking whether make sets $(MAKE)... (cached) yes checking for grep that handles long lines and -e... (cached) /bin/grep checking for pkg-config... /usr/bin/pkg-config checking for python... /usr/bin/python checking for python-yaml... yes checking for wget... /usr/bin/wget checking stddef.h usability... yes checking stddef.h presence... yes checking for stddef.h... yes checking arpa/inet.h usability... yes checking arpa/inet.h presence... yes checking for arpa/inet.h... yes checking assert.h usability... yes checking assert.h presence... yes checking for assert.h... yes checking ctype.h usability... yes checking ctype.h presence... yes checking for ctype.h... yes checking errno.h usability... yes checking errno.h presence... yes checking for errno.h... yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking for inttypes.h... (cached) yes checking getopt.h usability... yes checking getopt.h presence... yes checking for getopt.h... yes checking limits.h usability... yes checking limits.h presence... yes checking for limits.h... yes checking netdb.h usability... yes checking netdb.h presence... yes checking for netdb.h... yes checking netinet/in.h usability... yes checking netinet/in.h presence... yes checking for netinet/in.h... yes checking poll.h usability... yes checking poll.h presence... yes checking for poll.h... yes checking sched.h usability... yes checking sched.h presence... yes checking for sched.h... yes checking signal.h usability... yes checking signal.h presence... yes checking for signal.h... yes checking stdarg.h usability... yes checking stdarg.h presence... yes checking for stdarg.h... yes checking for stdint.h... (cached) yes checking stdio.h usability... yes checking stdio.h presence... yes checking for stdio.h... yes checking for stdlib.h... (cached) yes checking stdbool.h usability... yes checking stdbool.h presence... yes checking for stdbool.h... yes checking for string.h... (cached) yes checking for strings.h... (cached) yes checking sys/ioctl.h usability... yes checking sys/ioctl.h presence... yes checking for sys/ioctl.h... yes checking syslog.h usability... yes checking syslog.h presence... yes checking for syslog.h... yes checking sys/prctl.h usability... yes checking sys/prctl.h presence... yes checking for sys/prctl.h... yes checking sys/socket.h usability... yes checking sys/socket.h presence... yes checking for sys/socket.h... yes checking for sys/stat.h... (cached) yes checking sys/syscall.h usability... yes checking sys/syscall.h presence... yes checking for sys/syscall.h... yes checking sys/time.h usability... yes checking sys/time.h presence... yes checking for sys/time.h... yes checking time.h usability... yes checking time.h presence... yes checking for time.h... yes checking for unistd.h... (cached) yes checking for sys/ioctl.h... (cached) yes checking linux/if_ether.h usability... yes checking linux/if_ether.h presence... yes checking for linux/if_ether.h... yes checking linux/if_packet.h usability... yes checking linux/if_packet.h presence... yes checking for linux/if_packet.h... yes checking linux/filter.h usability... yes checking linux/filter.h presence... yes checking for linux/filter.h... yes checking linux/ethtool.h usability... yes checking linux/ethtool.h presence... yes checking for linux/ethtool.h... yes checking linux/sockios.h usability... yes checking linux/sockios.h presence... yes checking for linux/sockios.h... yes checking glob.h usability... yes checking glob.h presence... yes checking for glob.h... yes checking dirent.h usability... yes checking dirent.h presence... yes checking for dirent.h... yes checking fnmatch.h usability... yes checking fnmatch.h presence... yes checking for fnmatch.h... yes checking sys/resource.h usability... yes checking sys/resource.h presence... yes checking for sys/resource.h... yes checking for sys/types.h... (cached) yes checking sys/un.h usability... yes checking sys/un.h presence... yes checking for sys/un.h... yes checking sys/random.h usability... no checking sys/random.h presence... no checking for sys/random.h... no checking utime.h usability... yes checking utime.h presence... yes checking for utime.h... yes checking libgen.h usability... yes checking libgen.h presence... yes checking for libgen.h... yes checking for sys/socket.h... (cached) yes checking for net/if.h... yes checking for sys/mman.h... yes checking for linux/if_arp.h... yes checking for windows.h... no checking for winsock2.h... no checking for ws2tcpip.h... no checking for w32api/wtypes.h... no checking for w32api/winbase.h... no checking for wincrypt.h... no checking for inline... inline checking for pid_t... yes checking for size_t... yes checking for int32_t... yes checking for uint16_t... yes checking for uint32_t... yes checking for uint64_t... yes checking for uint8_t... yes checking for stdbool.h that conforms to C99... (cached) yes checking for _Bool... yes checking for stdlib.h... (cached) yes checking for GNU libc compatible malloc... yes checking for stdlib.h... (cached) yes checking for GNU libc compatible realloc... yes checking for gettimeofday... yes checking for memset... yes checking for strcasecmp... yes checking for strchr... yes checking for strdup... yes checking for strerror... yes checking for strncasecmp... yes checking for strtol... yes checking for strtoul... yes checking for memchr... yes checking for memrchr... yes checking for clock_gettime... yes checking for strptime... yes checking whether getrandom is declared... no checking for utime... yes checking for strlcpy... no checking for strlcat... no checking for special C compiler options needed for large files... no checking for _FILE_OFFSET_BITS value needed for large files... no checking host os... installation for aarch64-unknown-linux-gnu OS... ok checking for thread local storage __thread support... yes checking checking if gcc supports -march=native... yes checking for spatch... no checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes checking for inflate in -lz... yes checking lzma.h usability... yes checking lzma.h presence... yes checking for lzma.h... yes checking for lzma_code in -llzma... yes checking for Mpipe... no checking pcre.h usability... yes checking pcre.h presence... yes checking for pcre.h... yes checking for pcre_get_substring in -lpcre... yes checking for LIBPCREVERSION... no checking for pcre_dfa_exec in -lpcre... yes checking for PCRE JIT support... yes checking for PCRE JIT support usability... yes checking for libhs... no checking hs.h usability... no checking hs.h presence... no checking for hs.h... no checking yaml.h usability... yes checking yaml.h presence... yes checking for yaml.h... yes checking for yaml_parser_initialize in -lyaml... yes checking for pthread_create in -lpthread... yes checking jansson.h usability... yes checking jansson.h presence... yes checking for jansson.h... yes checking for json_dump_callback in -ljansson... yes checking whether OS_WIN32 is declared... no checking for libnet.h version 1.1.x... yes checking for libnet_write in -lnet... yes checking for libnet_build_icmpv6_unreach in -lnet... yes checking libnet_init dev type... yes checking pcap.h usability... yes checking pcap.h presence... yes checking for pcap.h... yes checking for pcap.h... (cached) yes checking pcap/pcap.h usability... yes checking pcap/pcap.h presence... yes checking for pcap/pcap.h... yes checking pcap/bpf.h usability... yes checking pcap/bpf.h presence... yes checking for pcap/bpf.h... yes checking for pcap_open_live in -lpcap... yes checking for pcap_activate in -lpcap... yes checking for pcap-config... /usr/bin/pcap-config checking for pcap_set_buffer_size in -lpcap... yes checking whether TPACKET_V2 is declared... yes checking whether PACKET_FANOUT_QM is declared... yes checking whether TPACKET_V3 is declared... yes checking whether SOF_TIMESTAMPING_RAW_HARDWARE is declared... yes checking for ./suricata-update/setup.py... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating suricata-update/Makefile config.status: creating config.h config.status: executing depfiles commands config.status: executing libtool commands checking iconv.h usability... yes checking iconv.h presence... yes checking for iconv.h... yes checking for libiconv_close in -liconv... no checking cap-ng.h usability... yes checking cap-ng.h presence... yes checking for cap-ng.h... yes checking for capng_clear in -lcap-ng... yes checking for libnspr... yes checking nspr.h usability... yes checking nspr.h presence... yes checking for nspr.h... yes checking for PR_GetCurrentThread in -lnspr4... yes checking for libnss... yes checking sechash.h usability... yes checking sechash.h presence... yes checking for sechash.h... yes checking for HASH_Begin in -lnss3... yes checking magic.h usability... yes checking magic.h presence... yes checking for magic.h... yes checking for magic_open in -lmagic... yes checking hiredis/hiredis.h usability... yes checking hiredis/hiredis.h presence... yes checking for hiredis/hiredis.h... yes checking for redisConnect in -lhiredis... yes checking hiredis/adapters/libevent.h usability... yes checking hiredis/adapters/libevent.h presence... yes checking for hiredis/adapters/libevent.h... yes checking event.h usability... yes checking event.h presence... yes checking for event.h... yes checking for event_base_free in -levent... yes checking for evthread_use_pthreads in -levent_pthreads... yes checking for LZ4F_createCompressionContext in -llz4... no Compressed pcap logging is not available without liblz4. If you want to enable compression, you need to install it. Ubuntu: apt-get install liblz4-dev Fedora: dnf install lz4-devel CentOS/RHEL: yum install epel-release yum install lz4-devel checking for getconf... /usr/bin/getconf checking for sphinx-build... /usr/local/bin/sphinx-build checking for pdflatex... no checking for cargo... no checking for rustc... no ERROR! Rust support requested but cargo not found. Ubuntu: apt-get install cargo Fedora: dnf install cargo CentOS/RHEL: yum install cargo Rust support will be disabled. checking for git... /usr/bin/git checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating suricata-update/Makefile config.status: creating Makefile config.status: creating src/Makefile config.status: creating rust/Makefile config.status: creating rust/Cargo.toml config.status: creating rust/.cargo/config config.status: creating qa/Makefile config.status: creating qa/coccinelle/Makefile config.status: creating rules/Makefile config.status: creating doc/Makefile config.status: creating doc/userguide/Makefile config.status: creating contrib/Makefile config.status: creating contrib/file_processor/Makefile config.status: creating contrib/file_processor/Action/Makefile config.status: creating contrib/file_processor/Processor/Makefile config.status: creating contrib/tile_pcie_logd/Makefile config.status: creating suricata.yaml config.status: creating etc/Makefile config.status: creating etc/suricata.logrotate config.status: creating etc/suricata.service config.status: creating python/Makefile config.status: creating python/suricata/config/defaults.py config.status: creating ebpf/Makefile config.status: creating config.h config.status: executing depfiles commands config.status: executing libtool commands === configuring in libhtp (/opt/code/suricata-4.1.2/libhtp) configure: running /bin/bash ./configure --disable-option-checking '--prefix=/usr' '--sysconfdir=/etc/' '--localstatedir=/var/' '--enable-hiredis' 'LIBS=-lssl -lcrypto' --cache-file=/dev/null --srcdir=. checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking for style of include used by make... GNU checking dependency style of gcc... gcc3 checking for g++... g++ checking whether we are using the GNU C++ compiler... yes checking whether g++ accepts -g... yes checking dependency style of g++... gcc3 checking build system type... aarch64-unknown-linux-gnu checking host system type... aarch64-unknown-linux-gnu checking how to print strings... printf checking for a sed that does not truncate output... /bin/sed checking for grep that handles long lines and -e... /bin/grep checking for egrep... /bin/grep -E checking for fgrep... /bin/grep -F checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 1572864 checking how to convert aarch64-unknown-linux-gnu file names to aarch64-unknown-linux-gnu format... func_convert_file_noop checking how to convert aarch64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop checking for /usr/bin/ld option to reload object files... -r checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for ar... ar checking for archiver @FILE support... @ checking for strip... strip checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ok checking for sysroot... no checking for a working dd... /bin/dd checking how to truncate binary pipes... /bin/dd bs=4096 count=1 checking for mt... mt checking if mt is a manifest tool... no checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... yes checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking how to run the C++ preprocessor... g++ -E checking for ld used by g++... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking for g++ option to produce PIC... -fPIC -DPIC checking if g++ PIC flag -fPIC -DPIC works... yes checking if g++ static flag -static works... yes checking if g++ supports -c -o file.o... yes checking if g++ supports -c -o file.o... (cached) yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... (cached) GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether build environment is sane... yes checking for strlcpy... no checking for strlcat... no checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes checking for inflate in -lz... yes checking OS... Linux checking for ld used by GCC... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for shared library run path origin... done checking for iconv... yes checking for working iconv... yes checking for iconv declaration... extern size_t iconv (iconv_t cd, char * *inbuf, size_t *inbytesleft, char * *outbuf, size_t *outbytesleft); checking for gcc support of -Wstrict-overflow=1... yes checking for gcc support of stack smashing protection... yes checking for gcc support of FORTIFY_SOURCE... yes checking for gcc support of -Wformat -Wformat-security... yes checking for gcc support of -fPIC... yes checking for doxygen... no checking for lcov... no checking that generated files are newer than configure... done checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating htp/htp_version.h config.status: creating Makefile config.status: creating htp.pc config.status: creating htp/Makefile config.status: creating test/Makefile config.status: creating docs/Makefile config.status: creating htp_config_auto_gen.h config.status: htp_config_auto_gen.h is unchanged config.status: executing depfiles commands config.status: executing libtool commands Suricata Configuration: AF_PACKET support: yes eBPF support: no XDP support: no PF_RING support: no NFQueue support: no NFLOG support: no IPFW support: no Netmap support: no DAG enabled: no Napatech enabled: no WinDivert enabled: no Unix socket enabled: yes Detection enabled: yes Libmagic support: yes libnss support: yes libnspr support: yes libjansson support: yes liblzma support: yes hiredis support: yes hiredis async with libevent: yes Prelude support: no PCRE jit: yes LUA support: no libluajit: no libgeoip: no Non-bundled htp: no Old barnyard2 support: no Hyperscan support: no Libnet support: yes liblz4 support: no Rust support: no Rust strict mode: no Rust debug mode: no Rust compiler: not set Rust cargo: not set Install suricatasc: yes Install suricata-update: yes Profiling enabled: no Profiling locks enabled: no Development settings: Coccinelle / spatch: no Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Generic build parameters: Installation prefix: /usr Configuration directory: /etc/suricata/ Log directory: /var/log/suricata/ --prefix /usr --sysconfdir /etc --localstatedir /var --datarootdir /usr/share Host: aarch64-unknown-linux-gnu Compiler: gcc (exec name) / gcc (real) GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: no Position Independent Executable enabled: no CFLAGS -g -O2 -march=native PCAP_CFLAGS -I/usr/include SECCFLAGS To build and install run 'make' and 'make install'. You can run 'make install-conf' if you want to install initial configuration files to /etc/suricata/. Running 'make install-full' will install configuration and rules and provide you a ready-to-run suricata. To install Suricata into /usr/bin/suricata, have the config in /etc/suricata and use /var/log/suricata as log dir, use: ./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/