# help for bro 1.4

**URL:** <https://community.zeek.org/t/help-for-bro-1-4/1605>\
**Category:** Zeek\
**Created:** [April 2, 2010, 11:53am UTC](https://community.zeek.org/t/help-for-bro-1-4/1605 "2010-04-02T11:53:51Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![vijay\_khadse](https://avatars.discourse-cdn.com/v4/letter/v/3da27b/32.png) [@vijay\_khadse](https://community.zeek.org/u/vijay_khadse)\
**Post date:** [April 2, 2010, 11:53am UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/1 "2010-04-02T11:53:51Z")

</div>

I am using Suse 11.2 on my laptop. I am using bro 1.4. I had tried bro 1.5  
but it gives me so many error on execution of make command. So I used bro  
1.4. it got installed . Could any one help me the steps how to use bro 1.4,  
what changes to be made in configuration files etc…  
Please help me .  
Regards ,  
Vijay M khadse

---

<div class="post-metadata">

**Author:** ![Justin\_Azoff](https://avatars.discourse-cdn.com/v4/letter/j/eb9ed0/32.png) [@Justin\_Azoff](https://community.zeek.org/u/Justin_Azoff)\
**Post date:** [April 2, 2010, 12:54pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/2 "2010-04-02T12:54:57Z")

</div>

What errors did you get compiling bro 1.5?

---

<div class="post-metadata">

**Author:** ![sridhar\_basam2](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@sridhar\_basam2](https://community.zeek.org/u/sridhar_basam2)\
**Post date:** [April 2, 2010, 2:15pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/3 "2010-04-02T14:15:00Z")

</div>

If you are looking at information on what bro can do and how to… You can read the user manual on the wiki at [http://www.bro-ids.org/wiki/index.php/User\_Manual](http://www.bro-ids.org/wiki/index.php/User_Manual)

It is a good resource for someone wanting to start experimenting with bro. Mail back to the list if there is anything in particular you are looking for.

Sri

---

<div class="post-metadata">

**Author:** ![vijay\_khadse](https://avatars.discourse-cdn.com/v4/letter/v/3da27b/32.png) [@vijay\_khadse](https://community.zeek.org/u/vijay_khadse)\
**Post date:** [April 3, 2010, 3:46am UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/4 "2010-04-03T03:46:09Z")

</div>

hello,

I am sending you the log of errors , I am getting when I was trying to install bro 1.5 on SUSE 11.2. It was errors some what related to python.h. Please help to solve the problem.

The error trace is as follows:-

---

<div class="post-metadata">

**Author:** ![vijay\_khadse](https://avatars.discourse-cdn.com/v4/letter/v/3da27b/32.png) [@vijay\_khadse](https://community.zeek.org/u/vijay_khadse)\
**Post date:** [April 3, 2010, 12:34pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/5 "2010-04-03T12:34:18Z")

</div>

hi,  
Have a look at errors i am getting while using bro 1.5 on suse 11.2. It is a long listing so many lines were deleted due to similar errors

broctl: building Python bindings for Broccoli …

( cd /usr/local/bro-1.5.1/aux/broccoli/bindings/python \

&& CFLAGS="-I/usr/local/bro-1.5.1/aux/broccoli/src" LDFLAGS="-L/usr/local/bro-1.5.1/aux/broccoli/src/.libs" python setup.py build -b /usr/local/bro-1.5.1/aux/broctl/.python-build )

running build

running build\_py

creating /usr/local/bro-1.5.1/aux/broctl/.python-build

creating /usr/local/bro-1.5.1/aux/broctl/.python-build/lib.linux-i686-2.6

copying broccoli.py → /usr/local/bro-1.5.1/aux/broctl/.python-build/lib.linux-i686-2.6

running build\_ext

building ‘\_broccoli\_intern’ extension

creating /usr/local/bro-1.5.1/aux/broctl/.python-build/temp.linux-i686-2.6

gcc -pthread -DNDEBUG -fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D\_FORTIFY\_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -I/usr/local/bro-1.5.1/aux/broccoli/src -fPIC -I…/…/src -I/usr/include/python2.6 -c broccoli\_intern\_wrap.c -o /usr/local/bro-1.5.1/aux/broctl/.python-build/temp.linux-i686-2.6/broccoli\_intern\_wrap.o

broccoli\_intern\_wrap.c:118:20: error: Python.h: No such file or directory

broccoli\_intern\_wrap.c:800: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘SWIG\_Python\_AddErrorMsg’:

broccoli\_intern\_wrap.c:847: error: ‘PyObject’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:847: error: (Each undeclared identifier is reported only once

broccoli\_intern\_wrap.c:847: error: for each function it appears in.)

broccoli\_intern\_wrap.c:847: error: ‘type’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:848: error: ‘value’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:849: error: ‘traceback’ undeclared (first use in this function)

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1028: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:1054: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1100: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:1202: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1213: error: expected specifier-qualifier-list before ‘PyObject’

broccoli\_intern\_wrap.c: In function ‘SWIG\_Python\_CheckImplicit’:

broccoli\_intern\_wrap.c:1225: error: ‘PySwigClientData’ has no member named ‘implicitconv’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1228: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1237: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘PySwigClientData\_Del’:

broccoli\_intern\_wrap.c:1292: warning: implicit declaration of function ‘Py\_XDECREF’

broccoli\_intern\_wrap.c:1292: error: ‘PySwigClientData’ has no member named ‘newraw’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1300: error: expected specifier-qualifier-list before ‘PyObject\_HEAD’

broccoli\_intern\_wrap.c:1307: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1313: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1366: error: expected declaration specifiers or ‘…’ before ‘FILE’

broccoli\_intern\_wrap.c: In function ‘PySwigObject\_print’:

broccoli\_intern\_wrap.c:1371: error: ‘PyObject’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:1371: error: ‘repr’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:1374: error: ‘fp’ undeclared (first use in this function)

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1382: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘PySwigObject\_compare’:

broccoli\_intern\_wrap.c:1393: error: ‘PySwigObject’ has no member named ‘ptr’

broccoli\_intern\_wrap.c:1394: error: ‘PySwigObject’ has no member named ‘ptr’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1398: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1555: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘swigobject\_methods’

broccoli\_intern\_wrap.c:1567: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1574: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1682: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1700: error: expected specifier-qualifier-list before ‘PyObject\_HEAD’

broccoli\_intern\_wrap.c:1707: error: expected declaration specifiers or ‘…’ before ‘FILE’

broccoli\_intern\_wrap.c: In function ‘PySwigPacked\_print’:

broccoli\_intern\_wrap.c:1710: error: ‘fp’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:1711: error: ‘PySwigPacked’ has no member named ‘pack’

broccoli\_intern\_wrap.c:1711: error: ‘PySwigPacked’ has no member named ‘size’

broccoli\_intern\_wrap.c:1715: error: ‘PySwigPacked’ has no member named ‘ty’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1720: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1731: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘PySwigPacked\_compare’:

broccoli\_intern\_wrap.c:1745: error: ‘PySwigPacked’ has no member named ‘size’

broccoli\_intern\_wrap.c:1746: error: ‘PySwigPacked’ has no member named ‘size’

broccoli\_intern\_wrap.c:1748: error: ‘PySwigPacked’ has no member named ‘size’

broccoli\_intern\_wrap.c:1748: error: ‘PySwigPacked’ has no member named ‘pack’

broccoli\_intern\_wrap.c:1748: error: ‘PySwigPacked’ has no member named ‘pack’

broccoli\_intern\_wrap.c:1748: error: ‘PySwigPacked’ has no member named ‘size’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:1751: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1753: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1760: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:1766: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:1775: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1845: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1865: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:1881: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:1887: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

b

broccoli\_intern\_wrap.c:2314: error: ‘swig\_empty\_runtime\_method\_table’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2314: error: expected expression before ‘]’ token

broccoli\_intern\_wrap.c:2316: error: ‘PyObject’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2316: error: ‘module’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2316: warning: implicit declaration of function ‘Py\_InitModule’

broccoli\_intern\_wrap.c:2318: error: ‘pointer’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2318: warning: implicit declaration of function ‘PyCObject\_FromVoidPtr’

broccoli\_intern\_wrap.c:2320: warning: implicit declaration of function ‘PyModule\_AddObject’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:2327: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘SWIG\_Python\_TypeQuery’:

broccoli\_intern\_wrap.c:2338: warning: implicit declaration of function ‘PyDict\_GetItem’

broccoli\_intern\_wrap.c:2552: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:2562: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:2611: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:2689: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘event\_callback’:

broccoli\_intern\_wrap.c:2807: error: ‘PyObject’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2807: error: ‘func’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2807: error: expected expression before ‘)’ token

broccoli\_intern\_wrap.c:2814: warning: implicit declaration of function ‘PyObject\_Call’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:2835: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘SWIG\_CanCastAsInteger’:

broccoli\_intern\_wrap.c:2891: error: ‘errno’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2891: error: ‘EDOM’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:2891: error: ‘ERANGE’ undeclared (first use in this function)

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wp.c:5865: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:5911: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:6592: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:7380: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:7709: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘SwigMethods’

broccoli\_intern\_wrap.c:8291: error: expected specifier-qualifier-list before ‘PyObject’

broccoli\_intern\_wrap.c:8297: error: expected specifier-qualifier-list before ‘PyObject\_HEAD’

broccoli\_intern\_wrap.c:8301: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:8306: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘swig\_varlink\_print’:

broccoli\_intern\_wrap.c:8320: error: ‘PyObject’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8320: error: ‘str’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8320: warning: implicit declaration of function ‘swig\_varlink\_str’

broccoli\_intern\_wrap.c:8322: warning: format ‘%s’ expects type ‘char \*’, but argument 3 has type ‘int’

broccoli\_intern\_wrap.c: In function ‘swig\_varlink\_dealloc’:

broccoli\_intern\_wrap.c:8329: error: ‘swig\_varlinkobject’ has no member named ‘vars’

broccoli\_intern\_wrap.c:8331: error: ‘swig\_globalvar’ has no member named ‘next’

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:8338: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:8356: error: expected declaration specifiers or ‘…’ before ‘PyObject’

broccoli\_intern\_wrap.c: In function ‘swig\_varlink\_setattr’:

broccoli\_intern\_wrap.c:8358: error: ‘swig\_varlinkobject’ has no member named ‘vars’

broccoli\_intern\_wrap.c:8361: error: ‘swig\_globalvar’ has no member named ‘set\_attr’

broccoli\_intern\_wrap.c:8361: error: ‘p’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8364: error: ‘swig\_globalvar’ has no member named ‘next’

broccoli\_intern\_wrap.c:8367: error: ‘PyExc\_NameError’ undeclared (first use in this function)

broccoli\_intern\_wrap.c: At top level:

broccoli\_intern\_wrap.c:8372: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:8424: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:8434: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:8450: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘ **attribute** ’ before ‘\*’ token

broccoli\_intern\_wrap.c:8463: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c:8490: error: expected ‘)’ before ‘\*’ token

broccoli\_intern\_wrap.c: In function ‘init\_broccoli\_intern’:

broccoli\_intern\_wrap.c:8543: error: ‘PyObject’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8543: error: ‘m’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8543: error: ‘d’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8543: warning: left-hand operand of comma expression has no effect

broccoli\_intern\_wrap.c:8546: warning: implicit declaration of function ‘SWIG\_Python\_FixMethods’

broccoli\_intern\_wrap.c:8546: error: ‘SwigMethods’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8549: warning: implicit declaration of function ‘PyModule\_GetDict’

broccoli\_intern\_wrap.c:8552: warning: implicit declaration of function ‘SWIG\_Python\_InstallConstants’

broccoli\_intern\_wrap.c:8555: warning: implicit declaration of function ‘PyDict\_SetItemString’

broccoli\_intern\_wrap.c:8555: warning: implicit declaration of function ‘SWIG\_globals’

broccoli\_intern\_wrap.c:8556: warning: implicit declaration of function ‘SWIG\_Python\_addvarlink’

broccoli\_intern\_wrap.c:8556: error: ‘Swig\_var\_bro\_debug\_calltrace\_get’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8556: error: ‘Swig\_var\_bro\_debug\_calltrace\_set’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8557: error: ‘Swig\_var\_bro\_debug\_messages\_get’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8557: error: ‘Swig\_var\_bro\_debug\_messages\_set’ undeclared (first use in this function)

broccoli\_intern\_wrap.c:8558: warning: implicit declaration of function ‘SWIG\_Python\_SetConstant’

broccoli\_intern\_wrap.c:8558: warning: implicit declaration of function ‘SWIG\_From\_int’

error: command ‘gcc’ failed with exit status 1

make[4]: \*\*\* [pybroccoli] Error 1

make[4]: Leaving directory `/usr/local/bro-1.5.1/aux/broctl’

make[3]: \*\*\* [all-recursive] Error 1

make[3]: Leaving directory `/usr/local/bro-1.5.1/aux’

make[2]: \*\*\* [all] Error 2

make[2]: Leaving directory `/usr/local/bro-1.5.1/aux’

make[1]: \*\*\* [all-recursive] Error 1

make[1]: Leaving directory `/usr/local/bro-1.5.1’

make: \*\*\* [all] Error 2

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [April 3, 2010, 5:05pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/6 "2010-04-03T17:05:35Z")

</div>

You need to install Python development files. broctl's installation  
currently doesn't check for that prerequisite.

Robin

---

<div class="post-metadata">

**Author:** ![Tyler\_Schoenke](https://avatars.discourse-cdn.com/v4/letter/t/6de8d8/32.png) [@Tyler\_Schoenke](https://community.zeek.org/u/Tyler_Schoenke)\
**Post date:** [April 5, 2010, 5:55pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/7 "2010-04-05T17:55:12Z")

</div>

Robin,

I have a list of Bro prerequisites written down for FreeBSD 7.1 and  
CentOS 5.3. The lists are in FreeMind .mm format, but I could convert  
them to HTML or add it to the Wiki if you are interested.

Tyler

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [April 5, 2010, 10:55pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/8 "2010-04-05T22:55:37Z")

</div>

Do you have a "preview"? How long is it? 🙂

Wiki is probably best, we can then link to it from other locations.

Robin

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:39pm UTC](https://community.zeek.org/t/help-for-bro-1-4/1605/9 "2022-05-06T15:39:04Z")

</div>


