Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Misc

Compile error libpcap PF_RING

 

 

NTop misc RSS feed   Index | Next | Previous | View Threaded


hwoehle at arcor

Jul 27, 2005, 4:44 AM

Post #1 of 3 (852 views)
Permalink
Compile error libpcap PF_RING

Hello,
I used to run snort with a PF_RING enabled libpcap on a debian 3.1 kernel
2.6.12.3.
I succesfully patched the kernel with PF_RING and compiled it as static.
Now i wanted to compile libpcap0.8.1 with the two replaced files taken from
the PF_RING cvs pcap-int.h and pcap-linux.c .

The compiler stopped finally with the following message:

pcap-linux.c: In Funktion »reset_kernel_filter«:
pcap-linux.c:2368: error: dereferencing pointer to incomplete type
pcap-linux.c:2368: error: dereferencing pointer to incomplete type
pcap-linux.c:2368: error: `PF_RING' undeclared (first use in this function)
make: *** [pcap-linux.o] Fehler 1

What went wrong ?

With regards
Holgi


MPetre at morneausobeco

Jul 27, 2005, 6:27 AM

Post #2 of 3 (811 views)
Permalink
Re: Compile error libpcap PF_RING [In reply to]

Hi,

I had the same problem trying to compile on a 2.6.5 kernel and I foud a
post on the list about something similar.

The fix for it was to copy my_ringfiles/kernel/include/linux/ring.h to
/usr/include/linux

Mishou

On 07/27/2005 07:44:22 AM Holger Wöhle wrote:
>Hello,
>I used to run snort with a PF_RING enabled libpcap on a debian 3.1 kernel
>2.6.12.3.
>I succesfully patched the kernel with PF_RING and compiled it as static.
>Now i wanted to compile libpcap0.8.1 with the two replaced files taken
from
>the PF_RING cvs pcap-int.h and pcap-linux.c .
>
>The compiler stopped finally with the following message:
>
>pcap-linux.c: In Funktion »reset_kernel_filter«:
>pcap-linux.c:2368: error: dereferencing pointer to incomplete type
>pcap-linux.c:2368: error: dereferencing pointer to incomplete type
>pcap-linux.c:2368: error: `PF_RING' undeclared (first use in this
function)
>make: *** [pcap-linux.o] Fehler 1
>
>What went wrong ?
>
>With regards
>Holgi
>
>
>_______________________________________________
>Ntop-misc mailing list
>Ntop-misc [at] listgateway
>http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Le présent courriel et toutes les pièces jointes contiennent de
l'information privée, exclusive, privilégiée et/ou confidentielle
s'adressant uniquement au destinataire. Toute utilisation, copie ou
distribution non autorisée du contenu de ce courriel est strictement
interdite. Si vous n'êtes pas le destinataire de ce message et que vous
l'avez reçu par erreur, veuillez le supprimer et en informer immédiatement
l'expéditeur.

This e-mail communication, including all attachments, may contain private,
proprietary, privileged and/or confidential information and is intended
only for the person to whom it is addressed. Any unauthorized use, copying
or distribution of the contents of this e-mail is strictly prohibited. If
you are not the intended recipient of this e-mail, and have received it in
error, please delete it and notify the sender immediately.


bdoctor at ps-ax

Jul 28, 2005, 12:31 AM

Post #3 of 3 (820 views)
Permalink
Re: Compile error libpcap PF_RING [In reply to]

Mishou's advice is correct, and you can also download packages here:

http://ps-ax.com/ring/

When I get done with blackhat I am going to finalize the latest PCAP version,
which is 0.9.something. I am using that and it works just fine. Just need to
do a patch / package set for it. I can also provide SRPMs but if your include
structure isn't setup right, it won't matter anyway :)

Did this fix the issue - adding ring.h to /usr/include?
-brad

>
> Hi,
>
> I had the same problem trying to compile on a 2.6.5 kernel and I foud a
> post on the list about something similar.
>
> The fix for it was to copy my_ringfiles/kernel/include/linux/ring.h to
> /usr/include/linux
>
> Mishou
>
> On 07/27/2005 07:44:22 AM Holger W?hle wrote:
> >Hello,
> >I used to run snort with a PF_RING enabled libpcap on a debian 3.1 kernel
> >2.6.12.3.
> >I succesfully patched the kernel with PF_RING and compiled it as static.
> >Now i wanted to compile libpcap0.8.1 with the two replaced files taken
> from
> >the PF_RING cvs pcap-int.h and pcap-linux.c .
> >
> >The compiler stopped finally with the following message:
> >
> >pcap-linux.c: In Funktion ?reset_kernel_filter?:
> >pcap-linux.c:2368: error: dereferencing pointer to incomplete type
> >pcap-linux.c:2368: error: dereferencing pointer to incomplete type
> >pcap-linux.c:2368: error: `PF_RING' undeclared (first use in this
> function)
> >make: *** [pcap-linux.o] Fehler 1
> >
> >What went wrong ?
> >
> >With regards
> >Holgi
> >
> >
> >_______________________________________________
> >Ntop-misc mailing list
> >Ntop-misc [at] listgateway
> >http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
> Le pr?sent courriel et toutes les pi?ces jointes contiennent de
> l'information priv?e, exclusive, privil?gi?e et/ou confidentielle
> s'adressant uniquement au destinataire. Toute utilisation, copie ou
> distribution non autoris?e du contenu de ce courriel est strictement
> interdite. Si vous n'?tes pas le destinataire de ce message et que vous
> l'avez re?u par erreur, veuillez le supprimer et en informer imm?diatement
> l'exp?diteur.
>
> This e-mail communication, including all attachments, may contain private,
> proprietary, privileged and/or confidential information and is intended
> only for the person to whom it is addressed. Any unauthorized use, copying
> or distribution of the contents of this e-mail is strictly prohibited. If
> you are not the intended recipient of this e-mail, and have received it in
> error, please delete it and notify the sender immediately.

> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

--
Brad Doctor, CISSP

NTop misc RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.