[Bro] Bro 2.6 beta feedback?

[Aashish Sharma]

So, I tried running this on FreeBSD 10.3-STABLE and I see the following, builds
fine but when trying to run: 

$ ./broctl install
Error: running "bro -v" failed with output:
Undefined symbol "_ZN6broker5topic8reservedE" referenced from COPY relocation in /home/bro/master/bin/bro


I do see that bro builds against its own libcaf:

$ ldd ./bro
./bro:
        libpcap.so.1 => /usr/local/opt/snf/lib/libpcap.so.1 (0x400ef1000)
        libssl.so.9 => /usr/local/lib/libssl.so.9 (0x40113a000)
        libcrypto.so.9 => /usr/local/lib/libcrypto.so.9 (0x401400000)
        libz.so.6 => /lib/libz.so.6 (0x401852000)
        libbroker.so.0 => /usr/local/lib/libbroker.so.0 (0x401c00000)
        libcaf_core.so.0.16.0 => /home/bro/master/lib/libcaf_core.so.0.16.0 (0x402200000)
        libcaf_io.so.0.16.0 => /home/bro/master/lib/libcaf_io.so.0.16.0 (0x402800000)
        libcaf_openssl.so.0.16.0 => /home/bro/master/lib/libcaf_openssl.so.0.16.0 (0x402c86000)
        libc++.so.1 => /usr/local/lib/libc++.so.1 (0x402ee0000)
        libcxxrt.so.1 => /lib/libcxxrt.so.1 (0x4031a0000)
        libm.so.5 => /lib/libm.so.5 (0x4033bd000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x4035e6000)
        libthr.so.3 => /lib/libthr.so.3 (0x4037f4000)
        libc.so.7 => /lib/libc.so.7 (0x403a18000)
        libsnf.so.0 => /usr/local/opt/snf/lib/libsnf.so.0 (0x403dc6000)
        libcaf_core.so.0.14.1 => /usr/local/lib/libcaf_core.so.0.14.1 (0x403fd6000)
        libcaf_io.so.0.14.1 => /usr/local/lib/libcaf_io.so.0.14.1 (0x4042c4000)
        libcxxrt.so => /usr/local/lib/libcxxrt.so (0x404574000)
        librt.so.1 => /usr/lib/librt.so.1 (0x404790000)


Aashish 


On Tue, Oct 02, 2018 at 04:38:53PM -0400, Seth Hall wrote:
> 
> 
> On 2 Oct 2018, at 16:06, David Hoelzer wrote:
> 
> > Working great for us.  We've had to rewrite some scripts and such, but 
> > otherwise, no issues. __
> 
> Any comments about what scripts you had to rewrite or the reasons for 
> why they needed rewritten?
> 
> > Thanks for your good (hard) work!
> 
> I can't take much credit for this release.  I had remarkably little code 
> it, but I think it's a pretty nice release!  A ton of work over multiple 
> years has gone into it.
> 
>   .Seth
> 
> --
> Seth Hall * Corelight, Inc * www.corelight.com
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro