# Errors installing af\_packet-plugin

**URL:** <https://community.zeek.org/t/errors-installing-af-packet-plugin/5878>\
**Category:** Zeek\
**Created:** [October 23, 2019, 3:05pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878 "2019-10-23T15:05:07Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mark\_Gardner](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@Mark\_Gardner](https://community.zeek.org/u/Mark_Gardner)\
**Post date:** [October 23, 2019, 3:05pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/1 "2019-10-23T15:05:07Z")

</div>

I installed Zeek 2.6.4 for Debian 10 following the instructions for adding the repo and manually installing the package. Next, I attempted to “bro-pkg install bro-af\_package-plugin” and received an error message in bro-af\_packet-plugin-build.log (see below). I have been unsuccessful in searching for information online to help me solve the problem. What should I be doing?

Note: the kernel header package for the running kernel (4.19.0-0.bpo.4-amd64) is installed. No idea why cmake can’t find them.

Mark

=== STDERR ===  
CMake Error at CMakeLists.txt:6 (include):  
include could not find load file:

BroPlugin

CMake Warning at CMakeLists.txt:8 (find\_package):  
By not providing “FindKernelHeaders.cmake” in CMAKE\_MODULE\_PATH this  
project has asked CMake to find a package configuration file provided by  
“KernelHeaders”, but CMake did not find one.

Could not find a package configuration file provided by “KernelHeaders”  
with any of the following names:

KernelHeadersConfig.cmake  
kernelheaders-config.cmake

Add the installation prefix of “KernelHeaders” to CMAKE\_PREFIX\_PATH or set  
“KernelHeaders\_DIR” to a directory containing one of the above files. If  
“KernelHeaders” provides a separate development package or SDK, be sure it  
has been installed.

CMake Error at CMakeLists.txt:22 (message):  
Kernel headers not found.

---

<div class="post-metadata">

**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\
**Post date:** [October 23, 2019, 3:33pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/2 "2019-10-23T15:33:12Z")

</div>

You need to install deb kernel header package...do:

apt-cache search linux-headers

and find the package that matches your running kernel.

James

---

<div class="post-metadata">

**Author:** ![Mark\_Gardner](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@Mark\_Gardner](https://community.zeek.org/u/Mark_Gardner)\
**Post date:** [October 23, 2019, 3:51pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/3 "2019-10-23T15:51:01Z")

</div>

> You need to install deb kernel header package…do:
> 
> apt-cache search linux-headers
> 
> and find the package that matches your running kernel.

I have the kernel headers installed:

$ uname -a  
Linux zeekmgr 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u1 (2019-09-20) x86\_64 GNU/Linux

$ dpkg -l linux-headers-4.19.0-6-amd64  
Desired=Unknown/Install/Remove/Purge/Hold

---

<div class="post-metadata">

**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\
**Post date:** [October 23, 2019, 3:55pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/4 "2019-10-23T15:55:51Z")

</div>

Ah....so yea you're looking at my point of contention with bro-pkg, so per:

[https://github.com/J-Gras/bro-af\_packet-plugin](https://github.com/J-Gras/bro-af_packet-plugin)

it looks like you might have to try and manually install after all.

James

---

<div class="post-metadata">

**Author:** ![Mark\_Gardner](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@Mark\_Gardner](https://community.zeek.org/u/Mark_Gardner)\
**Post date:** [October 23, 2019, 4:08pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/5 "2019-10-23T16:08:36Z")

</div>

I installed by hand the last time. I was hoping that the problem was fixed. No problem. Thanks for your help.

Mark

---

<div class="post-metadata">

**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\
**Post date:** [October 23, 2019, 4:11pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/6 "2019-10-23T16:11:56Z")

</div>

You bet...I was in the same boat...gave up on bro-pkg and just installed manually....won't look back...too much hassle.

James

---

<div class="post-metadata">

**Author:** ![Jan](https://avatars.discourse-cdn.com/v4/letter/j/ce7236/32.png) [@Jan](https://community.zeek.org/u/Jan)\
**Post date:** [October 23, 2019, 4:12pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/7 "2019-10-23T16:12:38Z")

</div>

Where are the headers located? Especially where can you find "include/linux/user.h"? This is what cmake is looking for...

Jan

---

<div class="post-metadata">

**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\
**Post date:** [October 23, 2019, 4:28pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/8 "2019-10-23T16:28:18Z")

</div>

Oh I see where this might be the issue...looks like common needs installed:

/usr/src/linux-headers-4.9.0-3-common/include/linux/user.h

ii linux-headers-4.9.0-3-amd64 4.9.30-2+deb9u5 amd64 Header files for Linux 4.9.0-3-amd64  
ii linux-headers-4.9.0-3-common 4.9.30-2+deb9u5 all Common header files for Linux 4.9.0-3

Debian is funky 😉

James

---

<div class="post-metadata">

**Author:** ![Mark\_Gardner](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@Mark\_Gardner](https://community.zeek.org/u/Mark_Gardner)\
**Post date:** [October 23, 2019, 4:31pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/9 "2019-10-23T16:31:40Z")

</div>

$ dpkg -L linux-headers-4.19.0-6-common | grep include/linux/user.h  
/usr/src/linux-headers-4.19.0-6-common/include/linux/user.h

Mark

---

<div class="post-metadata">

**Author:** ![Mark\_Gardner](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@Mark\_Gardner](https://community.zeek.org/u/Mark_Gardner)\
**Post date:** [October 23, 2019, 5:10pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/10 "2019-10-23T17:10:18Z")

</div>

Both common and amd64 kernel header packages are installed on my system. (The common package is a dependency of the amd64 package.)

Besides the kernel headed not being found, there was the error message about not finding BroPlugin. Any idea what that is about?

Mark

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/errors-installing-af-packet-plugin/5878/11 "2022-05-06T15:46:50Z")

</div>


