Richard:
Thanks very much for your help. The problem appeared to be that the older Ethereal source version (0.8.19) does not work with libpcap 0.7.2.
I was able to build Ethereal 0.9.12 on RedHat 8.0 with no problems.
The only reason I used 0.8.19 is that the online documentation (v1.1) refers to this older version, and I was trying to set up the same environment as the document describes.
thanks again,
Gavin Bowlby
Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx> wrote:
On Wed, 7 May 2003, gavin bowlby wrote:
> Part of my confusion is that there are many versions
> of the Ethereal package (in several forms) and many
> versions of the libpcap package on the Ethereal ftp
> site. I'm not sure which versions work with each
> other. A README file on the ftp site with
> recommendations on which versions of Ethereeal/libpcap
> can be used together would be helpful.
If you are prepared to build Ethereal, and it looks like you are, from
below, then you really should download the latest from www.ethereal.com,
which should be something like 0.9.12 or so.
If you don't want to build it, there are downloadable RPMs, but I cannot
say anything about them as I always build from source.
> Versions used:
>
> - a "configure" command from the ethereal-0.8.19
> package shows:
>
> checking for gtk-config... /usr/bin/gtk-config
> checking for GTK - version >= 1.2.0... yes
> checking for glib-config... /usr/bin/glib-config
> checking for GLIB - version >= 1.2.0... yes
>
> so it looks like I have gtk and glib installed ok.
>
> The libpcap version I used was libpcap-0.7.2. I can't
> find older versions of libpcap on the tcpdump.org. I
> build this version of libpcap without any problems.
>
> The final complaint from the ethereal package
> "configure" command is:
>
> checking for net/bpf.h... no
> configure: error: Header file net/bpf.h not found; if
> you installed libpcap from source, did you also do
> "make install-incl"?
This indicates that you might not have done 'make install' for libpcap, as
the all important bpf.h file did not end up in /usr/include/net ...
I am not really sure what the latest libpcap is, and it would be
worthwhile asking future questions on the ethereal-users or ethereal-dev
mailing list.
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.