[Bro] Redux - source build on OpenBSD (5.3) and BIND libs
jpl at didconcept.com
Thu Sep 5 06:14:12 PDT 2013
I encountered the same messages but didn't have the time to find the
reason and explain it.
I put this problem on hold and try to get a response as soon as possible.
Speaking of "CFLAGS", I had to use it because of the Ruby binding.
I think Broccoli wants to use "rubyio.h" which is in
This is the only reason I need to use this specific flag.
Le 2013-09-05 02:22, Darren Spruell a écrit :
> Very nice.
> I completed install in very similar manner, although things appeared
> to work without requiring CFLAGS to be set for the configure script;
> my built completed with:
> ./configure --with-bind=/opt/libbind
> gmake; gmake install
> That said, I do notice that when invoking some bro commands I get the
> following output about symbol size mismatches:
> $ bro --help
> bro:/usr/lib/libc.so.66.2: bro : WARNING: symbol(__p_class_syms) size
> mismatch, relink your program
> bro:/usr/lib/libc.so.66.2: bro : WARNING: symbol(_res) size mismatch,
> relink your program
> bro:/usr/lib/libc.so.66.2: bro : WARNING: symbol(__p_type_syms) size
> mismatch, relink your program
> bro version 2.1
> I can see this has been encountered several times over the years:
> (2003) http://comments.gmane.org/gmane.comp.security.detection.bro/222
> (2006) http://comments.gmane.org/gmane.comp.security.detection.bro/1382
> (2007) http://comments.gmane.org/gmane.comp.security.detection.bro/1890
> (2008) http://comments.gmane.org/gmane.os.openbsd.ports/18520
> (2012) http://comments.gmane.org/gmane.comp.security.detection.bro/4254
> Someone suggested it was related to issue between libbind and libc
> resolver routines. Anyone know more?
> On Wed, Sep 4, 2013 at 5:22 PM, Jean-Philippe Luiggi <jpl at didconcept.com> wrote:
>> Hi everybody,
>> As Lou said, getting libbind6 is the solution.
>> Here is the process I followed today :
>> 1) Packages
>> I had to install some of them (maybe others are needed but as my VPS was up
>> and running...)
>> # pkg_add flex bison libmagic swig ruby python gmake
>> Note : ruby is ruby 1.9 and python is 2.7
>> 2) Libbind 6.0
>> - Get libbind 6 from : http://www.isc.org/downloads/
>> - Extract it somewhere then compile/install it. Note that the directory I
>> used (/opt/share/libbind-6.0) could be another one.
>> # tar zxvf libbind-6.0.tar.gz
>> # cd libbind-6.0
>> # ./configure --prefix=/opt/share/libbind-6.0; make; make install
>> 3) Bro 2.1
>> - Extract bro-2.1 then compile it
>> # tar zxvf bro-2.1.tar.gz
>> # cd bro-2.1
>> # CFLAGS="-I/usr/include/ -I/usr/local/include/
>> -I/usr/local/include/ruby-1.9.1/ruby/backward/" ./configure
>> --prefix=/opt/share/bro-2.1 --with-bind=/opt/share/libbind-6.0/
>> # gmake; gmake install
>> Please note I use "/opt/share/bro-2.1" as install directory and I use
>> The whole process should work but if not, just send a mail, I will be happy
>> helping about it :)
>> PS: I will try to provide a complete document in the next weeks
>> Le 27/08/2013 02:00, Darren Spruell a écrit :
>>> Indeed, appears that the libbind port disappeared for 5.2 and 5.3 but
>>> has since been reinstated.
>>> I'll give it a go with the source package, thanks for the help.
>> Ce message a été vérifié par MailScanner
>> pour des virus ou des polluriels et rien de
>> suspect n'a été trouvé.
>> For all your IT requirements visit: http://www.transtec.co.uk
Ce message a été vérifié par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a été trouvé.
For all your IT requirements visit: http://www.transtec.co.uk
More information about the Bro