AnkurJain10 commented 3 years ago

Hi,

I am trying to install dropwatch in my Amazon Linux 1 server but am running into an error in the make step.

dwdump.c:512:39: error: ‘DLT_NETLINK’ undeclared (first use in this function) dwdump->pcap_handle = pcap_open_dead(DLT_NETLINK, dwdump->snaplen);

How can I fix this? I tried looking it up online but couldn't find a way to fix it.

The complete text when running make:


make  all-recursive
make[1]: Entering directory `/home/ec2-user/dropwatch'
Making all in src
make[2]: Entering directory `/home/ec2-user/dropwatch/src'
depbase=`echo main.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
gcc -DHAVE_CONFIG_H -I. -I..  -D_GNU_SOURCE  -g -Wall -Werror -I/usr/include/libnl3   -I/usr/include/libnl3    -g -O2 -MT main.o -MD -MP -MF $depbase.Tpo -c -o main.o main.c &&\
mv -f $depbase.Tpo $depbase.Po
depbase=`echo lookup.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
gcc -DHAVE_CONFIG_H -I. -I..  -D_GNU_SOURCE  -g -Wall -Werror -I/usr/include/libnl3   -I/usr/include/libnl3    -g -O2 -MT lookup.o -MD -MP -MF $depbase.Tpo -c -o lookup.o lookup.c &&\
mv -f $depbase.Tpo $depbase.Po
depbase=`echo lookup_kas.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
gcc -DHAVE_CONFIG_H -I. -I..  -D_GNU_SOURCE  -g -Wall -Werror -I/usr/include/libnl3   -I/usr/include/libnl3    -g -O2 -MT lookup_kas.o -MD -MP -MF $depbase.Tpo -c -o lookup_kas.o lookup_kas.c &&\
mv -f $depbase.Tpo $depbase.Po
depbase=`echo lookup_bfd.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
gcc -DHAVE_CONFIG_H -I. -I..  -D_GNU_SOURCE  -g -Wall -Werror -I/usr/include/libnl3   -I/usr/include/libnl3    -g -O2 -MT lookup_bfd.o -MD -MP -MF $depbase.Tpo -c -o lookup_bfd.o lookup_bfd.c &&\
mv -f $depbase.Tpo $depbase.Po
/bin/sh ../libtool  --tag=CC   --mode=link gcc -g -Wall -Werror -I/usr/include/libnl3   -I/usr/include/libnl3    -g -O2 -lnl-3   -lnl-genl-3 -lnl-3   -lreadline -lpcap -lbfd  -o dropwatch main.o lookup.o lookup_kas.o lookup_bfd.o  -lpcap
libtool: link: gcc -g -Wall -Werror -I/usr/include/libnl3 -I/usr/include/libnl3 -g -O2 -o dropwatch main.o lookup.o lookup_kas.o lookup_bfd.o  -lnl-genl-3 -lnl-3 -lreadline -lbfd -lpcap
depbase=`echo dwdump.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
gcc -DHAVE_CONFIG_H -I. -I..  -D_GNU_SOURCE  -g -Wall -Werror -I/usr/include/libnl3   -I/usr/include/libnl3    -g -O2 -MT dwdump.o -MD -MP -MF $depbase.Tpo -c -o dwdump.o dwdump.c &&\
mv -f $depbase.Tpo $depbase.Po
dwdump.c: In function ‘dwdump_pcap_init’:
dwdump.c:512:39: error: ‘DLT_NETLINK’ undeclared (first use in this function)
  dwdump->pcap_handle = pcap_open_dead(DLT_NETLINK, dwdump->snaplen);
                                       ^
dwdump.c:512:39: note: each undeclared identifier is reported only once for each function it appears in
make[2]: *** [dwdump.o] Error 1
make[2]: Leaving directory `/home/ec2-user/dropwatch/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/ec2-user/dropwatch'
make: *** [all] Error 2

nhorman commented 3 years ago

Whats the output of running the configure script for you? That error seems to indicate that you have a very old version of the libpcap development headers (one which doesn't include the DLT_NETLINK macro), which has been around since 2015.

AnkurJain10 commented 3 years ago

These are the versions of libpcap that are installed on the machine: libpcap.x86_64 14:1.4.0-1.20130826git2dbcaa1.10.amzn1 libpcap-devel.x86_64 14:1.4.0-1.20130826git2dbcaa1.10.amzn1

Here's the output of configure script:


checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking build system type... x86_64-unknown-linux-gnu
checking host system type... x86_64-unknown-linux-gnu
checking how to print strings... printf
checking for style of include used by make... GNU
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for a sed that does not truncate output... /bin/sed
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for fgrep... /bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking how to convert x86_64-unknown-linux-gnu file names to x86_64-unknown-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for ar... ar
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ok
checking for sysroot... no
checking for mt... no
checking if : is a manifest tool... no
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... no
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking for gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ISO C89... (cached) none needed
checking dependency style of gcc... (cached) gcc3
checking for gawk... (cached) gawk
checking for getopt_long... yes
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking for LIBNL3... yes
checking for LIBNLG3... yes
checking for READLINE... no
checking for LIBPCAP... no
checking for pcap_open_live in -lpcap... yes
checking bfd.h usability... yes
checking bfd.h presence... yes
checking for bfd.h... yes
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating doc/Makefile
config.status: creating tests/Makefile
config.status: creating config.h
config.status: executing depfiles commands
config.status: executing libtool commands
configure:
configure: dropwatch Version:     1.5.3
configure: Target:
configure: Installation prefix:    /usr/local
configure: Compiler:               gcc
configure: Compiler flags: -g -O2
configure: BFD library support: yes

nhorman commented 3 years ago

These are the versions of libpcap that are installed on the machine: libpcap.x86_64 14:1.4.0-1.20130826git2dbcaa1.10.amzn1 libpcap-devel.x86_64 14:1.4.0-1.20130826git2dbcaa1.10.amzn1

That probably explains it. Look at the date on those pseudo release values: 2013/08/26

Those libraries were tagged back in 2013, and are probably missing the DLT_NETLINK definition. If you log into your system, and look at /usr/include/pcap/dlt.h, you should find:

define DLT_NETLINK 253

But I expect you wont. You'll need to see about updating your pcap library to something reasonably modern.

You may be able to get away with modifying the dwdump utility by hand to include that defition, but no functional guarantees if you go that route. As another option you can run a fedora image instead of an amazon linux image, that has up to date pcap libraries

nhorman / dropwatch

Error when running make in Amazon Linux server #34

define DLT_NETLINK 253