[Bro] Building Bro with PF_RING

[James Lay]

On 2016-11-21 09:03, erik clark wrote:
> Are you building bro on 2.5 or 241? If you are building on 25, its in
> aux/plugins/pf_ring and you need to specify where the headers are for
> pfring.
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

My notes, building pf_ring into /opt:

git clone https://github.com/ntop/PF_RING.git
cd PF_RING/kernel
make
sudo make install

cd ../userland/lib
./configure --prefix=/opt/pfring
sudo make install

cd ../libpcap
./configure --prefix=/opt/pfring
sudo make install

cd ../tcpdump
./configure --prefix=/opt/pfring
sudo make install

cd bro-2.5
./configure --with-pcap=/opt/pfring
make
sudo make install

pf_ring plugin
cd aux/plugins/pf_ring/
./configure --bro-dist=../../.. --with-pfring=/opt/pfring 
--install-root=/opt/bro/lib/bro/plugins
make
sudo make install

Should get you up and going..if someone sees any errors please let me 
know.

James