ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Ethereal-users: RE: [Ethereal-users] Compile help question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "King, John (Greg) (LMIT-HOU)" <Greg.King@xxxxxxxx>
Date: Tue, 25 Apr 2006 08:25:44 -0500
Aha! Thanks that gave me enough information to locate a post in
ntop-misc that helped. 

I need to configure it like so:

./configure LIBS="-lpfring" PPFLAGS="-I/usr/local/include"
LDFLAGS="-L/usr/local/lib -lpfring" --with-ssl=/usr --disable-editcap
--disable-mergecap --with-zlib=/usr --with-net-snmp=/usr 

I think I'll post on ntop-misc now and maybe get this added to the wiki.

Thanks again for the help

Greg

> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx 
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Guy Harris
> Sent: Tuesday, April 25, 2006 1:27 AM
> To: Ethereal user support
> Subject: Re: [Ethereal-users] Compile help question
> 
> King, John (Greg) (LMIT-HOU) wrote:
> 
> > configure:24126: checking for pcap_open_live in -lpcap
> > configure:24156: gcc -o conftest 
> -D_U_="__attribute__((unused))" -Wall
> > -Wpointer-arith -W  -g -O2 -I/usr/local/include -I/usr/includ
> > e/glib-2.0 -I/usr/lib/glib-2.0/include    -I/usr/local/include
> > -L/usr/local/lib conftest.c -lpcap    >&5
> > /usr/local/lib/libpcap.a(pcap-linux.o)(.text+0xe1): In function
> > `pcap_read_linux':
> > : undefined reference to `pfring_recv'
> > /usr/local/lib/libpcap.a(pcap-linux.o)(.text+0x83d): In function
> > `pcap_close_linux':
> > : undefined reference to `pfring_close'
> > /usr/local/lib/libpcap.a(pcap-linux.o)(.text+0x91d): In function
> > `pcap_open_live':
> > : undefined reference to `pfring_open'
> > /usr/local/lib/libpcap.a(pcap-linux.o)(.text+0x13bd): In function
> > `pcap_set_cluster':
> > : undefined reference to `pfring_set_cluster'
> > /usr/local/lib/libpcap.a(pcap-linux.o)(.text+0x13c9): In function
> > `pcap_remove_from_cluster':
> > : undefined reference to `pfring_remove_from_cluster'
> > /usr/local/lib/libpcap.a(pcap-linux.o)(.text+0x13d5): In function
> > `pcap_set_reflector':
> > : undefined reference to `pfring_set_reflector'
> 
> It appears that the routines to use the ring buffer aren't in libpcap 
> itself.
> 
> What library are they in?  -lpfring?  Ethereal's configuration script 
> needs to link with that library, as well.
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>