[Bro] Bro Installation Problem - Python/GCC

Faisal Iqbal iqbalf at ucalgary.ca
Tue May 11 15:07:32 PDT 2010


Hi,
I tried bro 1.4 and it installed smoothly without any hassle. I guess I
can start my work now :) Thanks for the support!

And just for someone novice like me and who is using Bro on some
previously captured traces, you don't need to be root. Just perform
configure/make/make install steps, and then set the environment
variables as per user manual and you're good to go :)

-Faisal

On Mon, 2010-05-10 at 16:08 -0600, Tyler T. Schoenke wrote:
> See the thread ending with the following link.  That sounds like what
> you are seeing.
> 
> http://mailman.icsi.berkeley.edu/pipermail/bro/2008-July/003583.html
> 
> --
> Tyler Schoenke
> Network Security Analyst
> IT Security Office
> University of Colorado - Boulder
> 
> On 05/10/2010 03:43 PM, Faisal Iqbal wrote:
> > Hi,
> > I have double-checked and python-devel package was installed. python-tools and ruby packages were missing. However even after installing those packages, I'm still getting the exact same error during make.
> > 
> > -Faisal
> > 
> > -----Original Message-----
> > From: Tyler T. Schoenke [mailto:Tyler.Schoenke at Colorado.EDU] 
> > Sent: May-10-10 9:30 AM
> > To: faisal.iqbal at ucalgary.ca
> > Cc: bro at ICSI.Berkeley.EDU
> > Subject: Re: [Bro] Bro Installation Problem - Python/GCC
> > 
> > It looks like you probably need the python-devel package.  I've added
> > some dependencies to the Bro Wiki:
> > 
> > http://www.bro-ids.org/wiki/index.php?title=Bro_OS_Dependencies&action=edit&redlink=1
> > 
> > --
> > Tyler Schoenke
> > Network Security Analyst
> > IT Security Office
> > University of Colorado - Boulder
> > 
> > On 05/08/2010 06:25 PM, Faisal Iqbal wrote:
> >> Hi,
> >> I've installed Bro 1.5.1 on a Ubuntu 9.04 machine and its working fine
> >> however when I try to install the same version on RHEL 5 machine I'm
> >> getting errors during compile. More specifically, it gives gcc errors
> >> for broccoli_intern_wrap.c file. I have python/gcc etc on that machine
> >> and I'm using shipped version of pcap [that is the only big difference
> >> between two machines apart from OS I think]. Below is the output of make
> >>
> >> *************************************************************************
> >> running build
> >> running build_py
> >> running build_ext
> >> building '_broccoli_intern' extension
> >> gcc -pthread -DNDEBUG -g -fwrapv -O3 -Wall -Wstrict-prototypes
> >> -I/home/iqbalf/bro/bro-1.5.1/aux/broccoli/src -fPIC -I../../src
> >> -I/usr/local/include/python2.6 -c broccoli_intern_wrap.c
> >> -o /home/iqbalf/bro/bro-1.5.1/aux/broctl/.python-build/temp.linux-i686-2.6/broccoli_intern_wrap.o
> >> broccoli_intern_wrap.c: In function ‘valToPyObj’:
> >> broccoli_intern_wrap.c:2638: warning: pointer targets in passing
> >> argument 1 of ‘PyString_FromStringAndSize’ differ in signedness
> >> broccoli_intern_wrap.c: In function ‘pyObjToVal’:
> >> broccoli_intern_wrap.c:2724: warning: pointer targets in assignment
> >> differ in signedness
> >> broccoli_intern_wrap.c: In function ‘event_callback’:
> >> broccoli_intern_wrap.c:2818: warning: suggest explicit braces to avoid
> >> ambiguous ‘else’
> >> broccoli_intern_wrap.c: In function ‘_wrap_BroCtx_lock_func_set’:
> >> broccoli_intern_wrap.c:3236: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_BroCtx_id_func_set’:
> >> broccoli_intern_wrap.c:3288: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_BroCtx_dl_create_func_set’:
> >> broccoli_intern_wrap.c:3340: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_BroCtx_dl_lock_func_set’:
> >> broccoli_intern_wrap.c:3392: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_BroCtx_dl_free_func_set’:
> >> broccoli_intern_wrap.c:3444: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_time_set’:
> >> broccoli_intern_wrap.c:4649: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_time_get’:
> >> broccoli_intern_wrap.c:4672: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_hdr_size_set’:
> >> broccoli_intern_wrap.c:4702: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_hdr_size_get’:
> >> broccoli_intern_wrap.c:4725: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function
> >> ‘_wrap_bro_packet_pkt_link_type_set’:
> >> broccoli_intern_wrap.c:4755: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function
> >> ‘_wrap_bro_packet_pkt_link_type_get’:
> >> broccoli_intern_wrap.c:4778: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_pcap_hdr_set’:
> >> broccoli_intern_wrap.c:4789: error: storage size of ‘arg2’ isn’t known
> >> broccoli_intern_wrap.c:4811: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c:4814: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c:4789: warning: unused variable ‘arg2’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_pcap_hdr_get’:
> >> broccoli_intern_wrap.c:4826: error: storage size of ‘result’ isn’t known
> >> broccoli_intern_wrap.c:4837: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c:4838: error: invalid application of ‘sizeof’ to
> >> incomplete type ‘struct pcap_pkthdr’ 
> >> broccoli_intern_wrap.c:4838: error: invalid application of ‘sizeof’ to
> >> incomplete type ‘struct pcap_pkthdr’ 
> >> broccoli_intern_wrap.c:4826: warning: unused variable ‘result’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_data_set’:
> >> broccoli_intern_wrap.c:4867: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_data_get’:
> >> broccoli_intern_wrap.c:4890: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_tag_set’:
> >> broccoli_intern_wrap.c:4923: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c:4925: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_pkt_tag_get’:
> >> broccoli_intern_wrap.c:4950: error: dereferencing pointer to incomplete
> >> type
> >> broccoli_intern_wrap.c: In function ‘_wrap_new_bro_packet’:
> >> broccoli_intern_wrap.c:4963: error: invalid application of ‘sizeof’ to
> >> incomplete type ‘struct bro_packet’ 
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_event_add_val’:
> >> broccoli_intern_wrap.c:5585: warning: assignment discards qualifiers
> >> from pointer target type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_event_set_val’:
> >> broccoli_intern_wrap.c:5655: warning: assignment discards qualifiers
> >> from pointer target type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_event_registry_add’:
> >> broccoli_intern_wrap.c:5846: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_record_add_val’:
> >> broccoli_intern_wrap.c:6810: warning: assignment discards qualifiers
> >> from pointer target type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_record_set_nth_val’:
> >> broccoli_intern_wrap.c:6996: warning: assignment discards qualifiers
> >> from pointer target type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_record_set_named_val’:
> >> broccoli_intern_wrap.c:7067: warning: assignment discards qualifiers
> >> from pointer target type
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_table_foreach’:
> >> broccoli_intern_wrap.c:7252: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_set_foreach’:
> >> broccoli_intern_wrap.c:7450: warning: dereferencing type-punned pointer
> >> will break strict-aliasing rules
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_conn_set_packet_ctxt’:
> >> broccoli_intern_wrap.c:7519: warning: implicit declaration of function
> >> ‘bro_conn_set_packet_ctxt’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_conn_get_packet_ctxt’:
> >> broccoli_intern_wrap.c:7549: warning: implicit declaration of function
> >> ‘bro_conn_get_packet_ctxt’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_new’:
> >> broccoli_intern_wrap.c:7590: warning: implicit declaration of function
> >> ‘bro_packet_new’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_clone’:
> >> broccoli_intern_wrap.c:7614: warning: implicit declaration of function
> >> ‘bro_packet_clone’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_free’:
> >> broccoli_intern_wrap.c:7635: warning: implicit declaration of function
> >> ‘bro_packet_free’
> >> broccoli_intern_wrap.c: In function ‘_wrap_bro_packet_send’:
> >> broccoli_intern_wrap.c:7666: warning: implicit declaration of function
> >> ‘bro_packet_send’
> >> error: command 'gcc' failed with exit status 1
> >> make[4]: *** [pybroccoli] Error 1
> >> make[4]: Leaving directory `/home/iqbalf/bro/bro-1.5.1/aux/broctl'
> >> make[3]: *** [all-recursive] Error 1
> >> make[3]: Leaving directory `/home/iqbalf/bro/bro-1.5.1/aux'
> >> make[2]: *** [all] Error 2
> >> make[2]: Leaving directory `/home/iqbalf/bro/bro-1.5.1/aux'
> >> make[1]: *** [all-recursive] Error 1
> >> make[1]: Leaving directory `/home/iqbalf/bro/bro-1.5.1'
> >> make: *** [all] Error 2
> >> *************************************************************************
> >>
> >>
> >> I get similar output if just try to run setup.py in
> >> aux/broccoli/bindings/python
> >>
> >> Note that I didn't have any trouble in configure and it found everything
> >> it needed [with shipped pcap switch]
> >>
> >> I tried searching the mailing list and other resources but couldn't find
> >> anything about this or a similar error. I'll greatly appreciate if you
> >> could help me in this matter as I'm stuck on this for several days. Do
> >> tell me if you need anything else or a complete output for
> >> configure/make
> >>
> >> Thank you for your time :)
> >>
> >> Faisal iqbal
> >>
> >> P.S.    python version 2.6.1
> >>         gcc/g++ version 4.1.2
> >>
> >>
> >> _______________________________________________
> >> Bro mailing list
> >> bro at bro-ids.org
> >> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> > 
> > 
> > 
> 
> 




More information about the Bro mailing list