Wireshark · Ethereal-dev: Re: [ethereal-dev] Ethereal on SGI

[Guy Harris <guy@xxxxxxxxxx>]

>      Just tried to build ethereal on SGI IRIX.  configure failed because
> there is no net/bpf.h.

Unless you're using a pre-built binary "tcpdump", there should be a
"net/bpf.h" *somewhere*, unless you have a "pcap.h" that doesn't include
<net/bpf.h>.

> I'd like to use ethereal backed up to tcpdump
> writing to stdout (tcpdump -w -), since I see that ethereal can parse
> tcpdump.

(Ethereal can also parse "snoop", and I think Irix now includes "snoop".)

>      Is there a way to build ethereal without bpf support?

	tooting$ cd /usr/local/src/ethereal-0.7.3/
	tooting$ ./configure --help
	Usage: configure [options] [host]
	Options: [defaults in brackets after descriptions]
	Configuration:
	  --cache-file=FILE       cache test results in FILE

		...

	Features and packages:
	  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
	  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
	  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
	  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)

		...

	  --enable-pcap           use libpcap for packet capturing.  [default=yes]

		...

so "--disable-pcap" should do it.