[Bro] Protocol Analyzer Compilation Issue types.bif

Vlad Grigorescu vladg at illinois.edu
Tue Nov 1 11:31:50 PDT 2016


Hi Valerio,

Personally, I usually use binpac_quickstart, which should take care of
this for you:

https://github.com/grigorescu/binpac_quickstart

  --Vlad

Valerio <valerio.click at gmx.com> writes:

> Hi all,
>
> in writing a custom protocol analyzer for BRO, I came across a strange
> behaviour at compilation time.
>
> It seems that the order in which you specify events.bif and types.bif
> files in CMakeLists.txt matters. In fact, if I have:
>
> bro_plugin_begin(BroCustomProt)
> 	bro_plugin_cc(CustomProt.cc Plugin.cc)
> 	bro_plugin_bif(types.bif)
> 	bro_plugin_bif(events.bif)
> 	[...]
> bro_plugin_end()
>
> and I try to compile bro I get the following error:
>
> [...]
>  /build/src/analyzer/protocol/customprot/customprot_pac.h fatal error:
> types.bif.h: File or directory do not exist
>
>
> If instead I modify CMakeLists.txt by swapping events.bif and types.bif
> as in:
>
> bro_plugin_begin(BroCustomProt)
> 	bro_plugin_cc(CustomProt.cc Plugin.cc)
> 	bro_plugin_bif(events.bif)
> 	bro_plugin_bif(types.bif)
> 	[...]
> bro_plugin_end()
>
> the compilation succeeds.
>
> Is there any ordering issue in writing the CMakeLists.txt for a BRO
> Protocol Analyzer that needs to be taken into account?
>
> best regards,
> Valerio
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 800 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161101/56ec1e86/attachment.bin 


More information about the Bro mailing list