search

ntop / bro-pf_ring

Zeek (formerly Bro) plugin to capture packets through PF_RING
Other
223 stars 12 forks source link

Cannot compile #7

Open annp1987 opened 3 years ago

annp1987 commented 3 years ago

Hi,

I followed instruction: ./configure --bro-dist="path-to-zeek" --with-pfring="path-to-pfring" However I've got error: Cannot determine Bro source directory, use --bro-dist=DIR.

I can compile other plugin like zeek-community-id with command: ./configure --zeek-dist=path-to-zeek

Does everyone have compiled this plugin successful? Please share with me your experience, I really appreciate that.

andrewbeard commented 3 years ago

I haven't tried to build this in a year or so, so you may run into a bunch of issues. I think the one you're currently facing is because the build script in the current plugin is looking for a specific file to identify your source tree as bro. That file doesn't exist any more, but you can symlink the existing zeek file to the old filename instead.

In your zeek tree try running: ln -s zeek-path-dev.in bro-path-dev.in

No idea what issues you may encounter from there, though. Good luck!