Re: Errors installing af_packet-plugin
James Lay <[email protected]> Wed, 23 Oct 2019 09:55:51 -0600
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
Ah....so yea you're looking at my point of contention with bro-pkg, so per: https://github.com/J-Gras/bro-af_packet-plugin it looks like you might have to try and manually install after all. James On 2019-10-23 09:51, Mark Gardner wrote: > On Wed, Oct 23, 2019 at 11:39 AM James Lay <[email protected]> > wrote: > >> You need to install deb kernel header package...do: >> >> apt-cache search linux-headers >> >> and find the package that matches your running kernel. > > I have the kernel headers installed: > > $ uname -aLinux zeekmgr 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u1 > (2019-09-20) x86_64 GNU/Linux > > $ dpkg -l > linux-headers-4.19.0-6-amd64Desired=Unknown/Install/Remove/Purge/Hold > | > Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend > |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) > ||/ Name Version Architecture > Description > +++-============================-=================-============-===================================== > ii linux-headers-4.19.0-6-amd64 4.19.67-2+deb10u1 amd64 Header > files for Linux 4.19.0-6-amd64 > > # bro-pkg install bro-af_packet-plugin > The following packages will be INSTALLED: > bro/j-gras/bro-af_packet-plugin (1.4.0) > > Proceed? [Y/n] > Running unit tests for "bro/j-gras/bro-af_packet-plugin" > error: failed to run tests for bro/j-gras/bro-af_packet-plugin: > package build_command failed, see log in > /root/.bro-pkg/logs/bro-af_packet-plugin-build.log > Proceed to install anyway? [N/y] > > The error message (sent in the original post and below) suggests that > there are two problems: 1) can't find BroPlugin and 2) can't find the > kernel headers. As I demonstrated above, the headers are indeed > installed. I suspect there is a problem with the Debian package in > that it does not contain FindKernelHeaders.cmake or > kernelheaders-config.cmake but then again I don't know anything about > using Cmake. > > # cat /root/.bro-pkg/logs/bro-af_packet-plugin-build.log > > === STDERR === > CMake Error at CMakeLists.txt:6 (include): > include could not find load file: > > BroPlugin > > CMake Warning at CMakeLists.txt:8 (find_package): > By not providing "FindKernelHeaders.cmake" in CMAKE_MODULE_PATH this > project has asked CMake to find a package configuration file > provided by > "KernelHeaders", but CMake did not find one. > > Could not find a package configuration file provided by > "KernelHeaders" > with any of the following names: > > KernelHeadersConfig.cmake > kernelheaders-config.cmake > > Add the installation prefix of "KernelHeaders" to CMAKE_PREFIX_PATH > or set > "KernelHeaders_DIR" to a directory containing one of the above > files. If > "KernelHeaders" provides a separate development package or SDK, be > sure it > has been installed. > > CMake Error at CMakeLists.txt:22 (message): > Kernel headers not found. > > === STDOUT === > Build Directory : build > Bro Source Directory : > -- The C compiler identification is GNU 8.3.0 > -- The CXX compiler identification is GNU 8.3.0 > -- Check for working C compiler: /usr/bin/cc > -- Check for working C compiler: /usr/bin/cc -- works > -- Detecting C compiler ABI info > -- Detecting C compiler ABI info - done > -- Detecting C compile features > -- Detecting C compile features - done > -- Check for working CXX compiler: /usr/bin/c++ > -- Check for working CXX compiler: /usr/bin/c++ -- works > -- Detecting CXX compiler ABI info > -- Detecting CXX compiler ABI info - done > -- Detecting CXX compile features > -- Detecting CXX compile features - done > -- Configuring incomplete, errors occurred! > See also > "/root/.bro-pkg/testing/bro-af_packet-plugin/clones/bro-af_packet-plugin/build/CMakeFiles/CMakeOutput.log". > > Mark _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek