NEW Bro compile problems

Zeek
1

PktSrc.h:26:18: pcap.h: No such file or directory
make: *** [main.o] Error 1

I "fix" it by adding 'INCLS = -Ilinux-include -I/usr/include/pcap'

One of the recent additions was to change

  #include "pcap.h"

in PktSrc.h to

  #include <pcap.h>

I imagine this is the problem. I'm not quite sure what's the "right"
solution here, but maybe we should just go back to using "pcap.h". That's
what I've tentatively done.

util.cc: In function `void init_random_seed ()':
util.cc:395: `uint32_t' undeclared (first use this function)

I've changed this to uint32 (and also for the declaration of "result" a
little later in the function. That should do the trick.

    Vern

2

All,

While I am enjoying running my new bro-0.8_32, I find that some of the
stuff gets reported to syslog (such as ContentGap and some FTP attacks),
while the rest is getting piled to multiple files (ftp.log, http.log,
etc). I looked at the manual and the *.bro file and it looks like its
hard-coded with ALERT statements. Is there any way to globally redirect
everything to syslog?

Best,