[Bro] problems compiling bro 25 master on centos 6

[Azoff, Justin S]

> On Sep 23, 2016, at 8:10 AM, erik clark <philosnef at gmail.com> wrote:
> 
> So, I get pfring "found"... but no plugin built.
> 
> (from configure)
> -- Found PCAP: /opt/pfring/lib/libpcap.so
> -- Looking for pcap_get_pfring_id
> -- Looking for pcap_get_pfring_id - found
> 
> 
> Why is the plugin not being built? 
> 
> bro -N Bro::PF_RING
> ... line 1: plugin Bro::PF_RING is not available
> 
> This is the last hurdle I have to overcome. Not sure why it finds libpcap in the /opt/pfring directory, but doesn't build the plugin.

That's not the pf_ring plugin, it's the built-insupport for pf_ring by using the libpcap wrapper.  As the load-balancing documentation shows, you simply need to see if bro is linked against pf_ring:

$ ldd `which bro`|grep pcap
        libpcap.so.1 => /opt/pfring/lib/libpcap.so.1 (0x00007f86d01af000)



-- 
- Justin Azoff