[Bro-Dev] 2.6-beta build error

Azoff, Justin S jazoff at illinois.edu
Fri Sep 21 09:58:14 PDT 2018


> On Sep 21, 2018, at 11:24 AM, Jon Siwek <jsiwek at corelight.com> wrote:
> 
> On Thu, Sep 20, 2018 at 2:14 PM Michael Dopheide <dopheide at es.net> wrote:
>> 
>> bro.bif:3630:47: error: cannot convert ‘stat’ to ‘__dev_t {aka long unsigned int}’ in initialization
> 
> Thanks, it's fixed by a simple patch [1] now in master.
> 
> - Jon
> 
> [1] https://github.com/bro/bro/commit/d7097635f4b1ec9adca548b81ee42968629987a5

That fixed the build, but I think I found a new issue.

If bro is built with maxminddb support but the db files are not present yet, bro logs this twice for each connection:

1537548892.975875       Reporter::ERROR Failed to open GeoIP location database (lookup_location(Conn::c$id$resp_h))     /srv/bro/spool/installed-scripts-do-not-touch/site/ncsa/./bro-scripts/./conn-add-geodata.bro, line 23
1537548892.978846       Reporter::ERROR Failed to open GeoIP location database (lookup_location(Conn::c$id$orig_h))     /srv/bro/spool/installed-scripts-do-not-touch/site/ncsa/./bro-scripts/./conn-add-geodata.bro, line 19

I think I remember the older geoip bifs logging this as well, but only once at startup, not once per call to lookup_location.

— 
Justin Azoff




More information about the bro-dev mailing list