# can't compile BRO policy

**URL:** <https://community.zeek.org/t/cant-compile-bro-policy/1357>\
**Category:** Zeek\
**Created:** [July 11, 2008, 2:28pm UTC](https://community.zeek.org/t/cant-compile-bro-policy/1357 "2008-07-11T14:28:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paolo\_Tironi](https://avatars.discourse-cdn.com/v4/letter/p/ee59a6/32.png) [@Paolo\_Tironi](https://community.zeek.org/u/Paolo_Tironi)\
**Post date:** [July 11, 2008, 2:28pm UTC](https://community.zeek.org/t/cant-compile-bro-policy/1357/1 "2008-07-11T14:28:06Z")

</div>

Hi,

we are 3 students of University of Milan (DTI - Crema): Paolo Tironi, Paolo Bettini and Matteo Morato.

We study for a project on Bro IDS.

We install BRO only running ./configure and make, and then we setted  
$ pwd  
/home/christian/devel/bro  
$ echo $BROPATH  
/home/christian/devel/bro/policy:/home/christian/devel/bro/policy/sigs

Next, we setted the BRO\_DNS\_FAKE environment variable.

Finally we runned BRO: $ ./src/bro -r trace1.tcpdump tcp scan alarm weird.

We have some problems:

bt bin # bro -r trace1.tcpdump tcp scan alarm weird dns  
/usr/local/bro/policy/bro.init, line 1: warning: problem initializing NB-DNS: connect([200.3.200.5](http://200.3.200.5)): Network is unreachable  
/usr/local/bro/policy/dns.bro, line 123: run-time error: error compiling pattern /^?._([0-9]+.[0-9]+.[0-9]+.[0-9]+.in-addr.arpa)/  
/usr/local/bro/policy/dns.bro, line 179: run-time error: error compiling pattern /^?._(.)/  
/usr/local/bro/policy/dns.bro, line 557: run-time error: error compiling pattern /^?._(?(PTR|\*.in-addr).)/  
/usr/local/bro/policy/dns.bro, line 571: run-time error: error compiling pattern /^?._(?(PTR|\*._in-addr)._)/  
line 1: warning: event handlers never invoked:  
line 1: warning: account\_tried

Is there anybody who can help me?

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [July 11, 2008, 6:33pm UTC](https://community.zeek.org/t/cant-compile-bro-policy/1357/2 "2008-07-11T18:33:16Z")

</div>

There's a fix for this described at

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[http://www.bro-ids.org/wiki/index.php/"Error\_compiling\_pattern"](http://www.bro-ids.org/wiki/index.php/%22Error_compiling_pattern%22)

Does that solve the problem?

Robin

---

<div class="post-metadata">

**Author:** ![Paolo\_Tironi](https://avatars.discourse-cdn.com/v4/letter/p/ee59a6/32.png) [@Paolo\_Tironi](https://community.zeek.org/u/Paolo_Tironi)\
**Post date:** [July 14, 2008, 8:40am UTC](https://community.zeek.org/t/cant-compile-bro-policy/1357/3 "2008-07-14T08:40:33Z")

</div>

We don’t find these files…but we have anyway the problem.

Paolo  
Matteo  
Paolo

2008/7/11 Robin Sommer \<[robin@icir.org](mailto:robin@icir.org)\>:

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/cant-compile-bro-policy/1357/4 "2022-05-06T15:38:35Z")

</div>


