Beyond the Sky

The latest version of linux distro will tag along with the latest gcc 4.1 and it will cause the error compilation of bro-ids. I am not sure what is the problem but if you get the make error bellow:

Bro Configuration Summary
==========================================================

- Debugging enabled: no
- OpenSSL support: yes
- Non-blocking main loop: yes
- Non-blocking resolver: yes
- Installation prefix: /usr/local/bro
- Perl interpreter: /usr/bin/perl
- Using basic_string: yes
- Pcap used: system-provided


g++ -DHAVE_CONFIG_H -I. -I. -I../.. -W -Wall -Wno-unused
-I../../linux-include -g -O2 -c -o pac_parse.o `test -f pac_parse.cc
|| echo './'`pac_parse.cc
pac.h:109: warning: 'class Evaluatable' has virtual functions but
non-virtual destructor
pac.h:615: error: extra qualification 'Field::' on member 'getFieldBegin'
pac.h:616: error: extra qualification 'Field::' on member 'getFieldEnd'
pac.h:658: warning: 'class LetDef' has virtual functions but
non-virtual destructor
make[4]: *** [pac_parse.o] Error 1
make[4]: Leaving directory `/root/bro/bro-1.1/src/binpac'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory `/root/bro/bro-1.1/src'
make[2]: *** [all] Error 2
make[2]: Leaving directory `/root/bro/bro-1.1/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/root/bro/bro-1.1'
make: *** [all] Error 2

You can apply the patch attachment.bin
Anyway that is not binary file but a diff file, use file command to check

file attachment.bin

or

 head attachment.bin 

Copy the file into your folder and type

patch -p1 < attachment.bin

Compile again, and it should be working.

Ref: http://mailman.icsi.berkeley.edu/pipermail/bro/2006-June/002459.html