Bro 1.2 under Solaris 8

Hi,

Is there someone running Bro 1.2 successfully under Solaris 8?

I can compile it after some patching but it always core dump (as
more traffic is on the wire a faster it core dump).
The problem also occurs on Bro 1.1 but not on 0.9.

Best regards,
Stephan Toggweiler

Is there someone running Bro 1.2 successfully under Solaris 8?

I don't know whether anybody is using Bro with live traffic but it
used to work for me offline on Solaris 9 (iirc, the last version I
tried was 1.1).

I can compile it after some patching but it always core dump (as
more traffic is on the wire a faster it core dump).

It's supposed to compile on Solaris without requiring patches. Can
you send us the error messages as well as which tweaks you did to
get it to compile?

Regarding the core dumps, can you compile a debug version (configure
--enable-debug) and send a stack backtrace? (And one thing also
worth trying is reading a larger trace instead of running live,
which as said I've never tried on Solaris).

Robin

Hi Robin

...

> I can compile it after some patching but it always core dump (as
> more traffic is on the wire a faster it core dump).

It's supposed to compile on Solaris without requiring patches. Can
you send us the error messages as well as which tweaks you did to
get it to compile?

You are right there only some small patches for library problems (see
attachment).

Regarding the core dumps, can you compile a debug version (configure
--enable-debug) and send a stack backtrace? (And one thing also
worth trying is reading a larger trace instead of running live,
which as said I've never tried on Solaris).

After compiling bro with --enable-debug the pstack output from a core dump looks the following:

bro-1.2.patch.tar.gz (1.49 KB)

Thanks for the diffs. Seems that primarily "-ldl -lsocket" was
missing for the linker, right?

Two questions: for which library did you need the path /sw/sl/lib?
That doesn't seem to be a standard path? What's the "touch
$(top_srcdir)/src/libedit/termcap.h" in Makefile for?

Robin

> You are right there only some small patches for library problems (see
> attachment).

Thanks for the diffs. Seems that primarily "-ldl -lsocket" was
missing for the linker, right?

Yes, there where some more patches for bro 1.0 or bro 1.1.

Two questions: for which library did you need the path /sw/sl/lib?
That doesn't seem to be a standard path? What's the "touch
$(top_srcdir)/src/libedit/termcap.h" in Makefile for?

We use our own path (/sw) for building applications.
The building environment is gcc 4.0.3, bison 2.3, gas 2.16.

Solaris 8 has no termcap.h so I'm put it into libedit...

-Stephan