[Bro] RHEL 4.0/endace 10GigE/Bro

[Robin Sommer]

On Wed, Feb 08, 2006 at 11:16 -0600, Aashish Sharma wrote:

> PktSrc.o(.text+0x74c): In function `PktSrc::SetHdrSize()':
> /usr/local/packages/bro/bro-1.0/src/PktSrc.cc:248: undefined reference to `pcap_snprintf'
> PktSrc.o(.text+0xd7e): In function `PktInterfaceSrc::PktInterfaceSrc(char const*, char const*, PktSrc_Filter_Type)':
> /usr/local/packages/bro/bro-1.0/src/PktSrc.cc:360: undefined reference to `pcap_snprintf'
> PktSrc.o(.text+0xdd0):/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:326: undefined reference to `pcap_snprintf'
> PktSrc.o(.text+0xef6): In function `PktInterfaceSrc::PktInterfaceSrc(char const*, char const*, PktSrc_Filter_Type)':
> /usr/local/packages/bro/bro-1.0/src/PktSrc.cc:360: undefined reference to `pcap_snprintf'
> PktSrc.o(.text+0xf48):/usr/local/packages/bro/bro-1.0/src/PktSrc.cc:326: undefined reference to `pcap_snprintf'
> collect2: ld returned 1 exit status

This usually indicates that the used pcap.h does not match the
version of libpcap which is linked in. Do you have different
versions installed? If not, it may also be the case that Bro's
configure confuses the system libpcap with the included libpcap (I
forgot whether in 1.0 the pcap which ships with Bro is still the
default used by configure; this has changed recently). 

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICIR/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org