broker make error

Following this guide

http://www.icir.org/johanna/netcontrol/

I built and install the actor framework from github

Broker:
make -C build all
make[1]: Entering directory ‘/home/john/broker/build’
make[2]: Entering directory ‘/home/john/broker/build’
make[3]: Entering directory ‘/home/john/broker/build’
Scanning dependencies of target broker
make[3]: Leaving directory ‘/home/john/broker/build’
make[3]: Entering directory ‘/home/john/broker/build’
[ 1%] Building CXX object CMakeFiles/broker.dir/src/address.cc.o
[ 2%] Building CXX object CMakeFiles/broker.dir/src/broker.cc.o
In file included from /home/john/broker/src/broker.cc:9:0:
/home/john/broker/src/store/result_type_info.hh:5:46: fatal error: caf/abstract_uniform_type_info.hpp: No such file or directory

The issue is the version of CAF. 0.14 will work, I believe. If you do the research you’ll see that there is supposedly a patch that was added into the Bro code in 2015, but there’s no evidence of that since the compilation continues to fail.

CAF made a change that removed some types, which has lead to this issue. Nothing’s really gone, it’s just moved and Bro hasn’t kept up.

Yup, that is exactly it. There currently is a rewrite of Broker underway, which will use the newer library versions, but it is not quite done yet.

Also note - you are probably better served with the instructions at https://github.com/bro/bro-netcontrol; you do no longer need to use a branch of Bro, NetControl is in master now.

Johanna

Using Ubuntu 16 as the base os

So until everything is sorted with the new rewrite:

  1. Download caf 0.14 and config, make, make install

  2. Download bro from https://www.bro.org/download/index.html or do i have to pull from git?

  3. Config bro with --enable-broker

Download can 0.14, and pull Bro from git; configure with --enable-broker and --with-libcaf=[location] (if caf is installed outside the standard paths).

You also will probably have to set pythonpath like described in https://github.com/bro/bro-netcontrol if you want to use any of the connectors.

Johanna

Thank you much!

(Moving to bro-dev).

Agreed; that also should not be very hard, I can try to take a look at it.

Johanna