From sales at bodacion.com Fri Mar 7 07:00:28 2003 From: sales at bodacion.com (Bodacion Technologies) Date: Fri, 7 Mar 2003 07:00:28 -0800 Subject: Live Webinar - Surrender is Not an Option Message-ID: _______________________________________________________________________ Powered by List Builder To unsubscribe follow the link: http://lb.bcentral.com/ex/sp?c=27695&s=99490FD398379ADA&m=6 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20030307/e8fb499b/attachment.html From wsffree at hotmail.com Sat Mar 8 09:13:10 2003 From: wsffree at hotmail.com (Wang Shaofu) Date: Sun, 09 Mar 2003 01:13:10 +0800 Subject: building bro in linux Message-ID: Hi, >You should try linking with "/usr/lib/libresolv.a" instead of "-lresolv" -- >the latter uses the dynamic library, libresolv.so, unless you add the >"-static" option. Just edit the Makefile accordingly. ~~~~~~~~~~~~~~~~~~~~~I could not find -lresolv in Makefile. Would u tell me where should be corrected in Makefile? > >Good luck, > >Olivier. > > >On Wednesday 04 December 2002 07:02 am, you wrote: > > Hi, > > > > I wonder anyone has experience in building Bro in linux and, especially, > > in resolving the following problem: > > > > nb_dns.o: In function `nb_dns_activity': > > nb_dns.o(.text+0x678): undefined reference to `__ns_initparse' > > nb_dns.o(.text+0x742): undefined reference to `_ns_flagdata' > > nb_dns.o(.text+0x748): undefined reference to `_ns_flagdata' > > nb_dns.o(.text+0x9bc): undefined reference to `__ns_parserr' > > collect2: ld returned 1 exit status > > make: *** [bro] Error 1 > > > > I am using linux 2.4.18-3 (Redhat 7.3). I nm'ed libresolv.a and did find > > __ns_initparse in it: > > > > /usr/lib/libresolv.a:ns_parse.o:00000000 T __ns_initparse Thanks at advance Have a nice day! Ciao Cloud _________________________________________________________________ ?????????????? MSN Messenger: http://messenger.msn.com/cn From wsffree at hotmail.com Sat Mar 8 09:13:52 2003 From: wsffree at hotmail.com (Wang Shaofu) Date: Sun, 09 Mar 2003 01:13:52 +0800 Subject: building bro in linux Message-ID: Hi, >You should try linking with "/usr/lib/libresolv.a" instead of "-lresolv" -- >the latter uses the dynamic library, libresolv.so, unless you add the >"-static" option. Just edit the Makefile accordingly. ~~~~~~~~~~~~~~~~~~~~~I could not find -lresolv in Makefile. Would u tell me where should be corrected in Makefile? > >Good luck, > >Olivier. > > >On Wednesday 04 December 2002 07:02 am, you wrote: > > Hi, > > > > I wonder anyone has experience in building Bro in linux and, especially, > > in resolving the following problem: > > > > nb_dns.o: In function `nb_dns_activity': > > nb_dns.o(.text+0x678): undefined reference to `__ns_initparse' > > nb_dns.o(.text+0x742): undefined reference to `_ns_flagdata' > > nb_dns.o(.text+0x748): undefined reference to `_ns_flagdata' > > nb_dns.o(.text+0x9bc): undefined reference to `__ns_parserr' > > collect2: ld returned 1 exit status > > make: *** [bro] Error 1 > > > > I am using linux 2.4.18-3 (Redhat 7.3). I nm'ed libresolv.a and did find > > __ns_initparse in it: > > > > /usr/lib/libresolv.a:ns_parse.o:00000000 T __ns_initparse Thanks at advance Have a nice day! Ciao Cloud _________________________________________________________________ ??????????????? MSN Hotmail? http://www.hotmail.com From grd-pub.56 at NOSPAMnetcourrier.com Sat Mar 8 10:24:05 2003 From: grd-pub.56 at NOSPAMnetcourrier.com (Olivier Grumelard) Date: Sat, 8 Mar 2003 19:24:05 +0100 Subject: building bro in linux In-Reply-To: References: Message-ID: <200303081924.05926.grd-pub.56@NOSPAMnetcourrier.com> Hi, >>You should try linking with "/usr/lib/libresolv.a" instead of "-lresolv" >-- >>the latter uses the dynamic library, libresolv.so, unless you add the >>"-static" option. Just edit the Makefile accordingly. > ~~~~~~~~~~~~~~~~~~~~~I could not find >-lresolv in Makefile. Would u tell me where should be corrected in >Makefile? The "-lresolv" is included - or not - in the Makefile after the execution of the "./configure" script, depending on the presence of name service -related functions in your glibc. As it was not included in your case, you might be missing a "glibc-devel" package of some sort -- just make sure you have the libresolv's on your system, and re-run the "./configure" script. Other than that, the "LIBS" variable is the one you should edit in your Makefile. Good luck, Olivier. From anton at netForensics.com Mon Mar 17 14:04:04 2003 From: anton at netForensics.com (Anton Chuvakin, Ph.D.) Date: Mon, 17 Mar 2003 17:04:04 -0500 (EST) Subject: making bro produce a message when it crashes? Message-ID: All, Does anybody know how to make bro produce whatever debugging messages when it crashes (maybe even a core file)? In my case it always crashes after 2-7 days of running but I have no way of figuring out how to figure out what killed it. I tried to do exec tracing, but it doesn't seem to do what I needed. Best, -- Anton Chuvakin, Ph.D., GCIA Senior Security Analyst netForensics - http://www.netForensics.com 732-393-6071 From sommer at in.tum.de Tue Mar 18 00:53:21 2003 From: sommer at in.tum.de (Robin Sommer) Date: Tue, 18 Mar 2003 09:53:21 +0100 Subject: making bro produce a message when it crashes? In-Reply-To: References: Message-ID: <20030318085321.GA976@net.informatik.tu-muenchen.de> On Mon, Mar 17, 2003 at 17:04 -0500, Anton Chuvakin, Ph.D. wrote: > Does anybody know how to make bro produce whatever debugging > messages when it crashes (maybe even a core file)? In my case it > always crashes after 2-7 days of running but I have no way of > figuring out how to figure out what killed it. Did you keep an eye on Bro's memory usage? To my experience, if Bro crashes regularly after running quite some time (hours to several days, depending on the amount and nature of the traffic), it is most of the time due to running out of memory. Loading reduce-memory.bro helps a lot, but in our case I needed to tweak some additional things as well (in particular setting timeouts on script-level tables to expire old state). In an upcoming version, Bro will probably give a more informational message if it runs out of memory. Robin -- Robin Sommer * Room 01.08.055 * www.net.in.tum.de TU Munich * Phone (089) 289-18006 * sommer at in.tum.de -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20030318/15d58995/attachment.bin