I am trying to build Bro with PF_Ring support. I followed the instructions https://www.bro.org/sphinx/configuration/index.html#installing-pf-ring and built pfring to /opt/pfring-6.6. When I try to run: ‘./configure --with-pcap=/opt/pfring-6.6’ it does not seem to work.
– Found PCAP: /usr/local/lib/libpcap.so
– Performing Test PCAP_LINKS_SOLO
– Performing Test PCAP_LINKS_SOLO - Success
– Looking for pcap_get_pfring_id
– Looking for pcap_get_pfring_id - not found
Digging around cmake
Have a great day!