I don't know if this is the right forum to post this, but I'll give it a go anyway.
I'm trying to compile libpcap with support for pf_ring (
www.ntop.org), in order to speed up packetcapturing.
The documentation is pretty non-existant and all I can find is a summary of how everything should be done.
I've downloaded a kernel, patched it, built it and it's working, no problem there. Downloaded libpcap and here's when it gets tricky for me.
The documentation in the ring folder states:
-------------------------------------------------------------------------------------------
1. download libpcap-0.8.1
2. override the original libpcap files (pcap-int.h and pcap-linux.c) with the files enclosed
3. rebuild libpcap as usual
4. make sure that your libpcap-based application (e.g. ntop/tcpdump) is linked against this library
-------------------------------------------------------------------------------------------
Another note found in a README file in the ring folder.
-------------------------------------------------------------------------------------------
8. Now build libpcap-ring and you networking applications against libpcap-ring. Note that it is a common mistake to run
applications dynamically linked with libcap-ring with the old legacy libpcap.
-------------------------------------------------------------------------------------------
So I copied the files to the libpcap-0.8.1-ring folder, overwriting the old ones and issued a ./configure. Next step was to run "make", which failed, leaving a long error message on my screen. "make > make.log reports the following "gcc -O2 -I. -DHAVE_CONFIG_H -D_U_="__attribute__((unused))" -c ./pcap-linux.c". pcap-linux.c being one of the files I just copied over to the libpcap folder.
So I guess I would need to "Build the libpcap-ring library using the files included in the PF_RING source code" (as found on the webpage
www.ntop.org) which leads to my question,
-How?
Yeah, I'm a newbie, I know.
Any help would be appreciated!
Sorry for any spelling errors.
-------------------------------------
Solved!
Shame on me. All I had to do was to COPY the included files to the appropriate directories and then run make.
Well well, lesson learned!
