[Bro] BRO, BPF and FreeBSD 5.4

[Mike Weaver]

Hi All,

I didn't see this issue addressed on the list before, but my apologies
if I missed something.  I relatively new to FreeBSD, but not to
UN*X/Linux in general.  I realize that BRO is developed on FreeBSD 4.x
and not 'officially' supported on other versions, but due to security
etc... I'd like to run it on the latest STABLE version (5.4).

As you are probably aware, FreeBSD 5.x uses devfs and there is no
longer a MAKEDEV command.  I have BPF support enabled in my kernel
config file, but no BPF devices exist.  Bro_config detects this and
offers to create them for me, but uses the MAKEDEV script.

I've scoured Google, newsgroups, forums and the official FreeBSD
documents, but can't seem to find how to manually create the BPF
devices.  I assume that this is pretty trivial, but I don't see what
I'm missing.  I also assume that Vern is intimately familiar with BPF
from his association with LBL and his impressive portfolio of tools
and projects.  Any assistance would be appreciated!

Thanks,

Mike

--
Mike Weaver
US Department of Energy
MICS/SC-21.1
Germantown Building
Voice: 301-903-0072
Fax: 301-528-7774
Email: weaver at mics.doe.gov