[Bro] Running Bro on Alpine

[Daniel Guerra]

Check out


For alpine linux you need some patches

https://github.com/blacktop/docker-bro/tree/master/2.5


Regards,


Daniel

Op 18/09/2018 om 17:18 schreef Mike M:
> Hello,
>
> I’m trying to compile and run Bro on Alpine Linux and I’m having an
> issue with broctl crashing.
>
> Out of the box running ./configure and make using the bro 2.5.5 source
> I get a bunch of errors like that “'u_char' does not name a type” [1].
>
> I found this project for compiling Bro on Alpine [2]. The
> build-bro.sh. script includes two patch files and a cmake file [3].
> Manually applying those three files gets Bro to the point where it
> compiles successfully.
>
> Bro will run fine from the command line, but running broctl it crashes
> almost immediately [4]. Broctl reports Bro as crashed, but it briefly
> produces all the log files I'd expect (conn, dns, etc). There's
> nothing useful in the stdout, stderr or reporter logs.
>
> I built bro with --enable-debug, I've got gdb installed, and I set
> "ulimit -c unlimited" but I don't see a crash dump anywhere.
>
> In the absence of any error messages I'm unsure on how to proceed. Can
> anyone recommend next steps?
>
> thanks,
> Mike
>
> [1] see compile error.txt (attached)
> [2] https://github.com/danielguerra69/docker-bro-1
> [3] https://github.com/danielguerra69/docker-bro-1/tree/master/source
> [4] see broctl crash.txt (attached)
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180918/99d4b109/attachment.html