[Bro] RHEL 4.0/endace 10GigE/Bro

Aashish Sharma aashish at uiuc.edu
Wed Feb 8 09:16:31 PST 2006

On Wed, Feb 08, 2006 at 01:58:06PM +0000, Christian Kreibich wrote:
> On Tue, 2006-02-07 at 19:03 -0800, Robin Sommer wrote:
> > On Tue, Feb 07, 2006 at 16:22 -0600, Aashish Sharma wrote:
> > 
> > > Right now we see that bro mis-compiles on RHEL4. This appears to be
> > an issues with the glibc-headers package. 
> > 
> > Hmm... I've seen this before but right now I can't remember what's
> > the fix. Does anybody? 
> mhmmm the archive says that in November Vidar Seeberg had a similar
> problem ("Compiling error on Ubuntu Linux - now: make-problem"), but I
> cannot seem to find a mail that detailed a fix. Vern pointed out that
> the ef tool isn't actually needed, and iirc we have removed it in more
> recent releases(?).
>   http://thread.gmane.org/gmane.comp.security.detection.bro/1204

Here is the error. It did go a lot further in compilation then initially. Not sure if this is useful for you or I should send you the binpac coredumps as well. 

PktSrc.o(.text+0x74c): In function `PktSrc::SetHdrSize()':
/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:248: undefined reference to `pcap_snprintf'
PktSrc.o(.text+0xd7e): In function `PktInterfaceSrc::PktInterfaceSrc(char const*, char const*, PktSrc_Filter_Type)':
/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:360: undefined reference to `pcap_snprintf'
PktSrc.o(.text+0xdd0):/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:326: undefined reference to `pcap_snprintf'
PktSrc.o(.text+0xef6): In function `PktInterfaceSrc::PktInterfaceSrc(char const*, char const*, PktSrc_Filter_Type)':
/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:360: undefined reference to `pcap_snprintf'
PktSrc.o(.text+0xf48):/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:326: undefined reference to `pcap_snprintf'
collect2: ld returned 1 exit status
make[2]: *** [bro] Error 1
make[2]: Leaving directory `/usr/local/packages/bro/bro-1.0/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/packages/bro/bro-1.0/src'
make: *** [all] Error 2

> Is it just in aux/{cf,hf} that things are failing? If you cd into src
> directly once configure has finished and type "make", does it fail
> similarly?

> > (Just a guess: does it help if you remove "-I../../linux-include"
> > from the command line?)

> Yeah, a good thing to try!

I tried removing "-I../../linux-include" by commenting it gets erros. Both of running make after configure as well as running make inside the src directory. If you want to look at the errors I can sent that out as well.  

Thanks a lot for the prompt responses and all the help. 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20060208/a5418712/attachment.bin 

More information about the Bro mailing list