It may also be possible that you just need to install the libpcap include files (make
install-incl) which includes net/bpf.h
Guy Harris wrote:
> > Just tried to build ethereal on SGI IRIX. configure failed because
> > there is no net/bpf.h.
>
> Unless you're using a pre-built binary "tcpdump", there should be a
> "net/bpf.h" *somewhere*, unless you have a "pcap.h" that doesn't include
> <net/bpf.h>.
>
> > I'd like to use ethereal backed up to tcpdump
> > writing to stdout (tcpdump -w -), since I see that ethereal can parse
> > tcpdump.
>
> (Ethereal can also parse "snoop", and I think Irix now includes "snoop".)
>
> > Is there a way to build ethereal without bpf support?
>
> tooting$ cd /usr/local/src/ethereal-0.7.3/
> tooting$ ./configure --help
> Usage: configure [options] [host]
> Options: [defaults in brackets after descriptions]
> Configuration:
> --cache-file=FILE cache test results in FILE
>
> ...
>
> Features and packages:
> --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no)
> --enable-FEATURE[=ARG] include FEATURE [ARG=yes]
> --with-PACKAGE[=ARG] use PACKAGE [ARG=yes]
> --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no)
>
> ...
>
> --enable-pcap use libpcap for packet capturing. [default=yes]
>
> ...
>
> so "--disable-pcap" should do it.
