Are you building bro on 2.5 or 241? If you are building on 25, its in aux/plugins/pf_ring and you need to specify where the headers are for pfring. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161121/2eb8871d/attachment.html