Can't configure moloch (at build time)

75 views
Skip to first unread message

erik clark

unread,
May 31, 2016, 2:35:13 PM5/31/16
to Moloch Full Packet Capture
So, trying to build Moloch the hard way:
#
#
sh configure --with-pfring=/root/PF_RING/userland/libpcap-1.7.4/
.
.
.
.
configure: error: pcap.h or libpcap.a not found in /root/PF_RING/userland/libpcap-1.7.4/
#
#
find /root/PF_RING/userland/libpcap-1.7.4/ -name pcap.h
/root/PF_RING/userland/libpcap-1.7.4/pcap/pcap.h
/root/PF_RING/userland/libpcap-1.7.4/pcap.h
#
#
find /root/PF_RING/userland/libpcap-1.7.4/ -name libpcap.a
/root/PF_RING/userland/libpcap-1.7.4/libpcap.a


I am trying to do this without easybutton, and I have no access to the internet to pull content for third party  packages. I do have them tar'd up (the third party packages) from a different install done on an internet facing site, so I can link against those as needed. But I can't even get that far, since this just does not even see the specified src path to stuff I know I have. What is wrong with this? Thanks.

erik clark

unread,
May 31, 2016, 2:47:30 PM5/31/16
to Moloch Full Packet Capture
Scrap that. I read the config file and noticed it fills in the path to pcap.h and libpcap.a. Everything configures clean, but compiling fails miserably.

The first error I see is:

http.c:335: error: 'G_SOURCE_CONTINUE' undeclared (first use in this function)
http.c:335: error: (Each undeclared identifier is reported only once
http.c:335: error: for each function it appears in.)

I also have errors in http.c for CURLOPT_CLOSESOCKETDATA undeclared, CURLMOPT_MAX_TOTAL_CONNECTIONS
writer-simple: PTHREAD_COND/MUTEX_INITIALIZER undeclared

Any idea why these are coming up as undeclared now? 

Andy Wick

unread,
May 31, 2016, 3:00:21 PM5/31/16
to erik clark, Moloch Full Packet Capture
I would guess you have old versions of libcurl and glib.  I would strongly suggest you build on a machine on the Internet and move over. Free teir of AWS works fine. 
--
You received this message because you are subscribed to the Google Groups "Moloch Full Packet Capture" group.
To unsubscribe from this group and stop receiving emails from it, send an email to moloch-fpc+...@googlegroups.com.
To post to this group, send email to moloc...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages