[Zeek] Compilation without linux-vdso

Nafisa Mandliwala nafisa.mandliwala at gmail.com
Thu Feb 14 17:04:57 PST 2019


Hi all,

I've been trying the get Zeek to work on a platform that does not support
linux-vdso.

I see that vdso has 4 syscalls out of which the first 3 are used in the
code-
1. gettimeofday
2. clock_gettime
3. time
4. getcpu

A few things that I already tried doing-
1. For the time being, removing all usages of "gettimeofday" and
"clock_gettime"
2. Commenting out the following from cmake files and bro-config-
check_include_files(HAV_SYS_TIME_H)
check_include_files("time.h;sys/time.h", TIME_WITH_SYS_TIME)

I'm not sure I'm doing everything to replace/remove the occurrences of the
syscalls because ldd still shows that the bro execuatble is linking to
linux-vdso.so and the LD logs show that symbols for those syscalls are
being fetched (segfaults at this point)

Please let me know if I'm missing something?

Thanks,
Nafisa
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190214/a0fcd8f1/attachment.html 


More information about the Zeek mailing list