[Bro] Redux - source build on OpenBSD (5.3) and BIND libs

[Darren Spruell]

Very nice.

I completed install in very similar manner, although things appeared
to work without requiring CFLAGS to be set for the configure script;
my built completed with:

./configure --with-bind=/opt/libbind
gmake; gmake install

That said, I do notice that when invoking some bro commands I get the
following output about symbol size mismatches:

$ bro --help
bro:/usr/lib/libc.so.66.2: bro : WARNING: symbol(__p_class_syms) size
mismatch, relink your program
bro:/usr/lib/libc.so.66.2: bro : WARNING: symbol(_res) size mismatch,
relink your program
bro:/usr/lib/libc.so.66.2: bro : WARNING: symbol(__p_type_syms) size
mismatch, relink your program
bro version 2.1
[...]

I can see this has been encountered several times over the years:

(2003) http://comments.gmane.org/gmane.comp.security.detection.bro/222
(2006) http://comments.gmane.org/gmane.comp.security.detection.bro/1382
(2007) http://comments.gmane.org/gmane.comp.security.detection.bro/1890
(2008) http://comments.gmane.org/gmane.os.openbsd.ports/18520
(2012) http://comments.gmane.org/gmane.comp.security.detection.bro/4254

Someone suggested it was related to issue between libbind and libc
resolver routines. Anyone know more?


On Wed, Sep 4, 2013 at 5:22 PM, Jean-Philippe Luiggi <jpl at didconcept.com> wrote:
> Hi everybody,
>
> As Lou said, getting libbind6 is the solution.
>
> Here is the process I followed today :
>
> 1)  Packages
>
> I had to install some of them (maybe others are needed but as my VPS was up
> and running...)
>
> # pkg_add flex bison libmagic swig ruby python gmake
>
> Note : ruby is  ruby 1.9 and python is 2.7
>
>
> 2) Libbind 6.0
>
> - Get libbind 6 from : http://www.isc.org/downloads/
> - Extract it somewhere then compile/install it. Note that the directory I
> used (/opt/share/libbind-6.0)  could be another one.
>
> # tar zxvf libbind-6.0.tar.gz
> # cd libbind-6.0
> # ./configure --prefix=/opt/share/libbind-6.0; make; make install
>
> 3) Bro 2.1
>
> - Extract bro-2.1 then compile it
>
> # tar zxvf bro-2.1.tar.gz
> # cd bro-2.1
> # CFLAGS="-I/usr/include/ -I/usr/local/include/
> -I/usr/local/include/ruby-1.9.1/ruby/backward/" ./configure
> --prefix=/opt/share/bro-2.1 --with-bind=/opt/share/libbind-6.0/
> # gmake; gmake install
>
> Please note I use "/opt/share/bro-2.1" as install directory and I use
> "gmake".
>
> The whole process should work but if not,  just send a mail, I will be happy
> helping about it :)
>
> Cheers.
>
> Jean-Philippe.
>
> PS: I will try to provide a complete document in the next weeks
>
>
> Le 27/08/2013 02:00, Darren Spruell a écrit :
>
>> Indeed, appears that the libbind port disappeared for 5.2 and 5.3 but
>> has since been reinstated.
>>
>> http://www.openbsd.org/cgi-bin/cvsweb/ports/net/libbind/
>> http://marc.info/?l=openbsd-ports&m=136465613319561&w=2
>>
>> I'll give it a go with the source package, thanks for the help.
>>
>
>
> --
> Ce message a été vérifié par MailScanner
> pour des virus ou des polluriels et rien de
> suspect n'a été trouvé.
> For all your IT requirements visit: http://www.transtec.co.uk
>



-- 
Darren Spruell
phatbuckett at gmail.com