Bro & freebsd

[Vern Paxson]

> I don't find this file on my freebsd box,

It is renamed by the Makefile.  The Makefile steps will look like:

	bif_parse.h bif_parse.cc: builtin-func.y bif_arg.h bif_type.def
		$(YACC) $(YFLAGS) builtin-func.y
		@mv y.tab.h bif_parse.h
		@mv y.tab.c bif_parse.cc

so you'll find y.tab.c as bif_parse.cc.

That said, checking my email archives reveals that this is a FreeBSD 4.9
problem with its bison installation, and not a Bro problem, per the appended.
As a work-around, I can send you the bif_parse.cc that's generated using
my version of bison - that should build okay for you.

		Vern


Date:  Fri, 02 Jan 2004 09:22:46 -0800
From:  Vern Paxson <vern at jaguar.icir.org>
Subject:  Re: Error compiling bro-pub-0.8a58
To:  Richard Bejtlich <richard_bejtlich at yahoo.com>

Well, the problem line is:

#if defined (__GNUC_MINOR__) && 2093 <= (__GNUC__ * 1000 + __GNUC_MINOR__)
  __attribute__ ((__unused__))     
#endif

but that's not anything from the Bro sources.  It must be from your version
of bison (1.875), which is much more recent than the version I use.  So I'm
afraid I can't help you further with untangling it - it's some sort of
configuration problem or mismatch w/ gcc version.

> I'm interested in Bro because I cite you as an IDS
> pioneer in a book I'm writing, and I'd like to briefly
> describe how to get Bro working on a FreeBSD system. 

Great!

> I've only dabbled with Bro but I want to give the
> reader an easy guide to installation and basic use. 
> Your install doc is quite thorough, but do you have a
> "rapid deployment" guide of sorts you could share?

There's a "Getting Started" section in the manual, but currently that's it.

		Vern