OpenBSD 3.1

[Carter Bullard]

Hey Peter,
   There is a bpf.h included in the ./include/net
directory of the argus distribution.  Is it possible
that it is getting in the way?  I'll remove the
local copy of ./include/net/bpf.h hoping that that
will solve the problem.

   I'll make the changes that you recommend for compat.h
and put up a new version tonight.

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu 
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> Peter Van Epp
> Sent: Tuesday, May 21, 2002 5:21 PM
> To: argus
> Subject: OpenBSD 3.1
> 
> 
> 	Well, this looks to be an OpenBSD bug. They have changed struct 
> timeval to struct bpf_timeval in /usr/include/pcap-int.h and 
> /usr/include/pcap.h but bpf_timeval isn't defined in any 
> other header file that I could find.
> 	Building a new copy of libpcap-0.7.1 beside the 
> argus-2.0.5 directory (and then doing a make clobber 
> ./configure make) fixes that (for argus, 
> anything else will presumably still be broken).
> 	While I'm here if you are running on OpenBSD or NetBSD 
> it is worth 
> checking that the bpf fix from FreeBSD has been ported across 
> (I haven't had time to check). Otherwise you will lose 
> partially filled bpf buffers when you start or stop argus 
> (which if you never stop argus of course isn't a problem 
> :-)). If you are running FreeBSD < 4.5-RELEASE, upgrade 
> because otherwise you have the same problem.
> 
> Peter Van Epp / Operations and Technical Support 
> Simon Fraser University, Burnaby, B.C. Canada
> 
>