windowssuricata

Suricata unable to find pcap.h file while compiling in windows


Documentation for suricata windows compile: https://redmine.openinfosecfoundation.org/attachments/download/1175/SuricataWinInstallationGuide_v1.4.3.pdf 1

I have installed all the dependencies as mentioned in the documentation. Cloned the files.

To install libpcap, I followed the below steps:

Installed the winpcap installer: WinPcap · Download Downloaded the Development pack as mentioned in the document: WinPcap · Developer Resources Copied all the headers and include files from development pack to the location mentioned in the documentation. When I run the below command, I get the error: “configure: error: pcap.h not found”:

./configure --enable-luajit --enable-pie --enable-geoip --disable-gccmarch-native --with-libnss-libraries=/usr/lib --with-libnss-includes=/usr/include/nss/ --with-libnspr-libraries=/usr/lib --with-libnspr-includes=/usr/include/nspr

Below is the attachment for the same:

enter image description here

How to solve this issue?


Solution

  • I suggest that you try the windows msi installer found in Suricata page: https://suricata.io/download/

    If that doesn't work, it would be very welcome if you could report that in the project issue tracker or at least reach out in the suricata forum, so we can figure out what is wrong.

    If for some reason you don't want or can't use the installer, I'd try these steps, in case you haven't: https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Windows

    That guide has been updated more recently than the guide you've shared. Plus the pdf you're following has links to an unofficial Suricata repo, and shows a rather old version (current is Suri 6.0.x).