libpcap compatibility problem (Re: new bro "CURRENT" release - 0.8a57)

[Christian Kreibich]

On Wed, 2003-12-10 at 15:35, Christian Kreibich wrote:
> Hi all,
> 
> On Tue, 2003-12-09 at 18:39, Vern Paxson wrote:
> > Argh - the 0.8a57 release uses some new libpcap functionality
> > (pcap_compile_nocap(), and calling pcap_freecode() with a bpf_program*)
> > that isn't supported in older libpcap releases.  If someone could please
> > contribute autoconf tweaks to deal with this incompatibility, I'd much
> > appreciate it.
> 
> mhmm ... it seems that pcap_compile_nopcap() was added in 0.5, and
> pcap_freecode() without the pcap_t in 0.6.1, so I guess there should be
> a check for versions >= 0.6.1.
> 
> I'm attaching a patch that seems to work -- it checks whether the
> pcap_compile_nocap symbol exists, and whether a program passing only one
               ^^^^^
Heh. I duplicated the typo :) The patch *does* check for
pcap_compile_nopcap() though ...

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org