# bro on freebsd 7-RC1

**URL:** <https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294>\
**Category:** Zeek\
**Created:** [February 19, 2008, 7:10pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294 "2008-02-19T19:10:27Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anne\_Hutton](https://avatars.discourse-cdn.com/v4/letter/a/94ad74/32.png) [@Anne\_Hutton](https://community.zeek.org/u/Anne_Hutton)\
**Post date:** [February 19, 2008, 7:10pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/1 "2008-02-19T19:10:27Z")

</div>

is anyone using bro on freebsd 7-RC1?

thanks,  
Anne

---

<div class="post-metadata">

**Author:** ![Randolph\_Reitz](https://avatars.discourse-cdn.com/v4/letter/r/bb73d2/32.png) [@Randolph\_Reitz](https://community.zeek.org/u/Randolph_Reitz)\
**Post date:** [March 7, 2008, 10:12pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/2 "2008-03-07T22:12:28Z")

</div>

Anne,

I have a new box with FreeBSD 7.0-RELEASE installed (selected developer install). When compiling BRO (1.3.2), I get an error ...

Making install in src  
source='DNS-binpac.cc' object='DNS-binpac.o' libtool=no depfile='.deps/DNS-binpac.Po' tmpdepfile='.deps/DNS-binpac.TPo' depmode=gcc3 /usr/local/bin/bash ../depcomp g++ -DHAVE\_CONFIG\_H -I. -I. -I.. -I. -I../aux/binpac/lib -I../src -I. -I.. -Ilibedit -O -W -Wall -Wno-unused -g -O2 -c -o DNS-binpac.o `test -f 'DNS-binpac.cc'

> > echo './'`DNS-binpac.cc

In file included from ARP.h:43,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from Sessions.h:28,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from RuleMatcher.h:12,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from Conn.h:32,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from Analyzer.h:11,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from UDP.h:25,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from DNS-binpac.h:6,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from DNS-binpac.cc:3:  
NetVar.h:260:30: error: const.bif.netvar\_h: No such file or directory  
NetVar.h:261:30: error: event.bif.netvar\_h: No such file or directory  
In file included from DNS-binpac.cc:3:  
DNS-binpac.h:9:21: error: dns\_pac.h: No such file or directory  
DNS-binpac.h:40:25: error: dns\_tcp\_pac.h: No such file or directory  
In file included from DNS-binpac.h:7,  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;from DNS-binpac.cc:3:  
TCP.h: In static member function 'static bool TCPStats\_Analyzer::Available()':  
TCP.h:360: error: 'conn\_stats' was not declared in this scope  
TCP.h:360: error: 'tcp\_rexmit' was not declared in this scope  
In file included from DNS-binpac.cc:3:  
DNS-binpac.h: At global scope:  
DNS-binpac.h:37: error: 'binpac' has not been declared  
(this goes on and on)

It looks like there is a DNS dependency that I need to figure out??

Randy Reitz  
Fermilab

---

<div class="post-metadata">

**Author:** ![Anne\_Hutton](https://avatars.discourse-cdn.com/v4/letter/a/94ad74/32.png) [@Anne\_Hutton](https://community.zeek.org/u/Anne_Hutton)\
**Post date:** [March 7, 2008, 10:25pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/3 "2008-03-07T22:25:58Z")

</div>

Randolph Reitz wrote:

> Anne,
> 
> I have a new box with FreeBSD 7.0-RELEASE installed (selected developer install). When compiling BRO (1.3.2), I get an error ...

try using bro 1.2.1 (stable) rather than current to see if that compiles. However, I found that bro-1.2.1 just stopped collecting after a while.

I will try 1.3.2 as well.

Anne

---

<div class="post-metadata">

**Author:** ![Paul\_Schmehl](https://avatars.discourse-cdn.com/v4/letter/p/dbc845/32.png) [@Paul\_Schmehl](https://community.zeek.org/u/Paul_Schmehl)\
**Post date:** [March 7, 2008, 10:30pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/4 "2008-03-07T22:30:09Z")

</div>

I'm the FreeBSD port maintainer for bro. I'm running 7.0 RELEASE (i386), and I'm not having a problems compiling bro. (I just compiled it after reading your email.) Make sure that your sources, kernel and ports are up to date and try it again. Also, what architechture are you trying to compile on? I'm running i386 SMP.

On a different note, I updated this port on request. I don't use bro personally, so I'd appreciate any comments about improvements, changes, etc. For example, if you'd like to see more options available (we call them KNOBS), let me know, \*in detail\*, what you're looking for, and I'll work on improving the port further. Since I don't know how people use the program, it's hard for me to know what functionality to include by default or highlight, offer as an option, etc., etc.

---

<div class="post-metadata">

**Author:** ![Bernhard\_Ager](https://avatars.discourse-cdn.com/v4/letter/b/35a633/32.png) [@Bernhard\_Ager](https://community.zeek.org/u/Bernhard_Ager)\
**Post date:** [March 7, 2008, 11:33pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/5 "2008-03-07T23:33:55Z")

</div>

Just a wild guess: You've been trying a parallel build ('make -j  
...')? As far as I know the Bro Makefile is not yet save for parallel  
building, so just leave the '-j' out.

&nbsp;&nbsp;Bernhard

---

<div class="post-metadata">

**Author:** ![Randolph\_Reitz](https://avatars.discourse-cdn.com/v4/letter/r/bb73d2/32.png) [@Randolph\_Reitz](https://community.zeek.org/u/Randolph_Reitz)\
**Post date:** [March 10, 2008, 6:47pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/6 "2008-03-10T18:47:27Z")

</div>

I didn't notice the bro port. Yes, the bro port compiles fine on 7.0-RELEASE. You get bro-1.2.1 which is the current stable release. I was trying to compile bro-1.3.2 which is the current development release.

Are FreeBSD ports made for development releases?

Thanks,  
Randy

---

<div class="post-metadata">

**Author:** ![Paul\_Schmehl](https://avatars.discourse-cdn.com/v4/letter/p/dbc845/32.png) [@Paul\_Schmehl](https://community.zeek.org/u/Paul_Schmehl)\
**Post date:** [March 10, 2008, 8:00pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/7 "2008-03-10T20:00:53Z")

</div>

In general, no. FreeBSD devel ports are usually the libraries associated with or required by a port.

I thought about creating one for the devel release, but the problem is, the code is constantly changing, so maintaining the port would be a PITA. It's much easier to maintain a stable release version.

However, when I said "I'm not having any problems compiling bro", I was referring to the 1.3.1 devel release that you were trying to compile. I downloaded and compiled it before posting my response.

Did you ever say what ARCH you're running?

---

<div class="post-metadata">

**Author:** ![Randolph\_Reitz](https://avatars.discourse-cdn.com/v4/letter/r/bb73d2/32.png) [@Randolph\_Reitz](https://community.zeek.org/u/Randolph_Reitz)\
**Post date:** [March 10, 2008, 9:13pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/8 "2008-03-10T21:13:40Z")

</div>

> > > I'm the FreeBSD port maintainer for bro. I'm running 7.0 RELEASE  
> > > (i386), and  
> > > I'm not having a problems compiling bro. (I just compiled it after  
> > > reading  
> > > your email.) Make sure that your sources, kernel and ports are up  
> > > to date and  
> > > try it again. Also, what architechture are you trying to compile  
> > > on? I'm  
> > > running i386 SMP.
> > 
> > I didn't notice the bro port. Yes, the bro port compiles fine on  
> > 7.0-RELEASE. You get bro-1.2.1 which is the current stable release. I was  
> > trying to compile bro-1.3.2 which is the current development release.
> > 
> > Are FreeBSD ports made for development releases?
> 
> In general, no. FreeBSD devel ports are usually the libraries associated with  
> or required by a port.
> 
> I thought about creating one for the devel release, but the problem is, the  
> code is constantly changing, so maintaining the port would be a PITA. It's  
> much easier to maintain a stable release version.
> 
> However, when I said "I'm not having any problems compiling bro", I was  
> referring to the 1.3.1 devel release that you were trying to compile. I  
> downloaded and compiled it before posting my response.
> 
> Did you ever say what ARCH you're running?

I have ...  
[root@dtmb ~]# uname -a  
FreeBSD dtmb.dhcp.fnal.gov 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386

Humm, I tried to 'make install' bro 1.3.2 again and it worked.

[root@dtmb /home/rreitz/bro-1.3.2]# /usr/local/bro/bin/bro -v  
/usr/local/bro/bin/bro version 1.3.2

I can't say what is different today from last Friday. I thought that installing the bro port may have added a dependency, but that doesn't seem to be the case...

[root@dtmb /usr/ports/security/bro]# make depends  
===\> bro-1.2\_1 depends on file: /usr/local/bin/perl5.8.8 - found  
===\> bro-1.2\_1 depends on executable: bison - found  
===\> bro-1.2\_1 depends on file: /usr/local/bin/perl5.8.8 - found  
[root@dtmb /usr/ports/security/bro]# whereis bison  
bison: /usr/local/bin/bison /usr/local/man/man1/bison.1.gz /usr/ports/devel/bison  
[root@dtmb /usr/ports/security/bro]# ls -l /usr/local/bin/bison  
-r-xr-xr-x 1 root wheel 228028 Mar 5 14:37 /usr/local/bin/bison

Thanks for looking at this. I'll install my 10GB network card and see what new trouble I can find.

Randy

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/bro-on-freebsd-7-rc1/1294/9 "2022-05-06T15:38:28Z")

</div>

Closed on May 6, 2022, 3:38pm UTC


