configure.ac:18: error: possibly undefined macro: AC_MSG_ERROR

[okarpov]

ubuntu server 20.04

/home/dropwatch/dropwatch-1.5.4# ./autogen.sh
+ mkdir -p m4
+ autoreconf -fv --install
autoreconf: Entering directory `.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --force -I m4
autoreconf: configure.ac: tracing
autoreconf: configure.ac: not using Libtool
autoreconf: running: /usr/bin/autoconf --force
configure.ac:18: error: possibly undefined macro: AC_MSG_ERROR
      If this token and others are legitimate, please use m4_pattern_allow.
      See the Autoconf documentation.
configure.ac:22: error: possibly undefined macro: AC_CHECK_LIB
autoreconf: /usr/bin/autoconf failed with exit status: 1

[okarpov]

this seems resolved my issue:

apt install pkg-config

[okarpov]

to overcome further error: ./configure: line 2804: LT_INIT: command not found

run this:

aclocal
autoconf
automake --add-missing

[okarpov]

and to solve this error:

configure: error: in `/home/dropwatch/dropwatch-1.5.4':
configure: error: no acceptable C compiler found in $PATH
See `config.log' for more details

install gcc: apt-get install build-essential

[okarpov]

finally i'm stack at this:

/home/dropwatch/dropwatch-1.5.4# apt install libnl-3-200
Reading package lists... Done
Building dependency tree
Reading state information... Done
libnl-3-200 is already the newest version (3.4.0-1).
libnl-3-200 set to manually installed.
0 upgraded, 0 newly installed, 0 to remove and 19 not upgraded.

/home/dropwatch/dropwatch-1.5.4# ./configure
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
./configure: line 2804: LT_INIT: command not found
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of gcc... gcc3
checking for gawk... (cached) gawk
checking for getopt_long... yes
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking for LIBNL3... no
configure: error: libnl-3.0 is required

[okarpov]

also, a lot of other non-mentioned libs are required

so no way to easy install on clean Ubuntu Server 20.04

[okarpov]

after installing all adittional libs/packages i'm stack at this:

/home/dropwatch/dropwatch-1.5.4# ./configure
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking how to print strings... printf
checking whether make supports the include directive... yes (GNU style)
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking dependency style of gcc... gcc3
checking for a sed that does not truncate output... /usr/bin/sed
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for fgrep... /usr/bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for ar... ar
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ok
checking for sysroot... no
checking for a working dd... /usr/bin/dd
checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1
checking for mt... mt
checking if mt is a manifest tool... no
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... yes
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking for gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ISO C89... (cached) none needed
checking whether gcc understands -c and -o together... (cached) yes
checking dependency style of gcc... (cached) gcc3
checking for gawk... (cached) gawk
checking for getopt_long... yes
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking for LIBNL3... yes
checking for LIBNLG3... yes
checking for READLINE... yes
checking for LIBPCAP... yes
checking bfd.h usability... no
checking bfd.h presence... no
checking for bfd.h... no
configure: error: Couldn't find or include bfd.h

[okarpov]

seems you need install this:

apt-get install binutils-dev

[okarpov]

after i solved all issues above i realized that i have no idea how to run it and analyze anything

sad :(

[okarpov]

finally something you can run/try is:

tests/rundropwatch.sh

[okarpov]

got the following output but can not understand what does it mean :(

Initializing kallsyms db
dropwatch> -e set alertlimit 1
dropwatch> start
Enabling monitoring...
Kernel monitoring activated.
Issue Ctrl-C to stop monitoring
31 drops at ip_rcv_finish_core.isra.0+1b2 (0xffffffff8f364bb2) [software]
2 drops at __udp4_lib_rcv+aef (0xffffffff8f3a13cf) [software]
5 drops at ip_error+8b (0xffffffff8f35e8db) [software]
1 drops at ip6_mc_input+1ed (0xffffffff8f3f517d) [software]
30 drops at ip_rcv_finish_core.isra.0+1b2 (0xffffffff8f364bb2) [software]
1 drops at ip_error+8b (0xffffffff8f35e8db) [software]
1 drops at __netif_receive_skb_core+14f (0xffffffff8f2eb06f) [software]
1 drops at __udp4_lib_rcv+aef (0xffffffff8f3a13cf) [software]
34 drops at ip_rcv_finish_core.isra.0+1b2 (0xffffffff8f364bb2) [software]
5 drops at ip_error+8b (0xffffffff8f35e8db) [software]
1 drops at ip6_mc_input+1ed (0xffffffff8f3f517d) [software]
33 drops at ip_rcv_finish_core.isra.0+1b2 (0xffffffff8f364bb2) [software]
2 drops at ip_error+8b (0xffffffff8f35e8db) [software]
Got a stop message
dropwatch> stop
Deactivation requested, turning off monitoring
Got a stop message
dropwatch> exit
Shutting down ...

[nhorman]

Its telling you where in the kernel packets are being dropped (or more specifically where kfree_skb is being called instead of consume_skb)

I appreciate you wanting to use dropwatch, but all the answers to the various questions you ask are available via google.

To get you started : https://netbeez.net/blog/how-to-monitor-packet-drops-dropwatch/