# 64-bit?

**URL:** <https://community.zeek.org/t/64-bit/1640>\
**Category:** Zeek\
**Created:** [June 30, 2010, 7:26pm UTC](https://community.zeek.org/t/64-bit/1640 "2010-06-30T19:26:04Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [June 30, 2010, 7:26pm UTC](https://community.zeek.org/t/64-bit/1640/1 "2010-06-30T19:26:04Z")

</div>

Does anyone run Bro build as a 64-bit binary on a 64-bit platform?

Thanks,  
&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Scott\_Sakai](https://avatars.discourse-cdn.com/v4/letter/s/f1d935/32.png) [@Scott\_Sakai](https://community.zeek.org/u/Scott_Sakai)\
**Post date:** [June 30, 2010, 7:38pm UTC](https://community.zeek.org/t/64-bit/1640/2 "2010-06-30T19:38:58Z")

</div>

I'm running Bro 1.5 on x86\_64 Linux. No obvious issues here -- except with  
broccoli.

---

<div class="post-metadata">

**Author:** ![Tyler\_Schoenke](https://avatars.discourse-cdn.com/v4/letter/t/6de8d8/32.png) [@Tyler\_Schoenke](https://community.zeek.org/u/Tyler_Schoenke)\
**Post date:** [June 30, 2010, 7:57pm UTC](https://community.zeek.org/t/64-bit/1640/3 "2010-06-30T19:57:38Z")

</div>

It has been running fine on CentOS 5.3 x86\_64 since late 2009.

Tyler

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [June 30, 2010, 8:02pm UTC](https://community.zeek.org/t/64-bit/1640/4 "2010-06-30T20:02:30Z")

</div>

> I'm running Bro 1.5 on x86\_64 Linux.

Current development version on x86\_64 FreeBSD 8.0 here, also with no  
apparent problems.

> No obvious issues here -- except with broccoli.

What's the broccoli issue? Can you file a tracker ticket for that  
please?

Robin

---

<div class="post-metadata">

**Author:** ![Justin\_Azoff](https://avatars.discourse-cdn.com/v4/letter/j/eb9ed0/32.png) [@Justin\_Azoff](https://community.zeek.org/u/Justin_Azoff)\
**Post date:** [June 30, 2010, 8:03pm UTC](https://community.zeek.org/t/64-bit/1640/5 "2010-06-30T20:03:12Z")

</div>

I am as well.. but I haven't had any problems with broccoli.

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [June 30, 2010, 8:03pm UTC](https://community.zeek.org/t/64-bit/1640/6 "2010-06-30T20:03:20Z")

</div>

Ok, that's partly why I asked. It looks like broccoli needs to be built with -fPIC. I'll file a ticket in the tracker.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Michael\_Jennings](https://avatars.discourse-cdn.com/v4/letter/m/b782af/32.png) [@Michael\_Jennings](https://community.zeek.org/u/Michael_Jennings)\
**Post date:** [June 30, 2010, 9:21pm UTC](https://community.zeek.org/t/64-bit/1640/7 "2010-06-30T21:21:39Z")

</div>

I built 32- and 64-bit RPM's of bro 1.4 without needing to force -fPIC  
anywhere. I haven't had a chance to update them to 1.5 yet, so it's  
possible that has changed.

Michael

---

<div class="post-metadata">

**Author:** ![Scott\_Sakai](https://avatars.discourse-cdn.com/v4/letter/s/f1d935/32.png) [@Scott\_Sakai](https://community.zeek.org/u/Scott_Sakai)\
**Post date:** [June 30, 2010, 9:43pm UTC](https://community.zeek.org/t/64-bit/1640/8 "2010-06-30T21:43:07Z")

</div>

I encountered underruns and corruption while using bropipe to send  
datatypes involving an int (count, port...) to Bro. The underlying issue  
seems to be that broccoli is sending a 32-bit int and Bro is expecting a  
64-bit one.

In what is probably the Wrong Way(tm) to approach the problem, I patched  
broccoli to send 64-bit ints with the high 32 bits zeroed.

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [July 1, 2010, 2:16am UTC](https://community.zeek.org/t/64-bit/1640/9 "2010-07-01T02:16:15Z")

</div>

Did you have Bro built with --enable-int64?

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Gregor\_Maier3](https://avatars.discourse-cdn.com/v4/letter/g/5f8ce5/32.png) [@Gregor\_Maier3](https://community.zeek.org/u/Gregor_Maier3)\
**Post date:** [July 1, 2010, 5:27am UTC](https://community.zeek.org/t/64-bit/1640/10 "2010-07-01T05:27:40Z")

</div>

Seth Hall wrote:

> Does anyone run Bro build as a 64-bit binary on a 64-bit platform?

working fine for me. However, I do trace analysis with it without using  
broccoli or cluster....

cu  
gregor

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [July 2, 2010, 4:27pm UTC](https://community.zeek.org/t/64-bit/1640/11 "2010-07-02T16:27:13Z")

</div>

After some more investigation, here's the ticket:  
&nbsp;&nbsp;[http://tracker.icir.org/bro/ticket/256](http://tracker.icir.org/bro/ticket/256)

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Scott\_Sakai](https://avatars.discourse-cdn.com/v4/letter/s/f1d935/32.png) [@Scott\_Sakai](https://community.zeek.org/u/Scott_Sakai)\
**Post date:** [July 2, 2010, 7:13pm UTC](https://community.zeek.org/t/64-bit/1640/12 "2010-07-02T19:13:55Z")

</div>

Initially I did. That seems to be what caused the problem. Rebuilding  
without --enable-int64 appears to have resolved the underrun errors in bro.

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [July 2, 2010, 7:28pm UTC](https://community.zeek.org/t/64-bit/1640/13 "2010-07-02T19:28:04Z")

</div>

Yet another ticket needs filed for that one.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:39pm UTC](https://community.zeek.org/t/64-bit/1640/14 "2022-05-06T15:39:08Z")

</div>


