Ethereal-users: Re: [ethereal-users] ./configure problem -- Header file net/bpf.h not found
> I forgot why it needs it, but IIRC, it has something to do with
> making/reading the file format.
It probably has to do with "pcap.h" including "net/bpf.h", regardless of
whether the platform on which it was installed has such a header file or
not. It's included by "pcap.h" to, at a minimum, declare "bpf_u_int32",
used in many function prototypes and structure declarations in "pcap.h".
(Ethereal includes "pcap.h" because it uses "libpcap" for packet
capture.)
If RH 6 and/or Slackware 4, when you install the "libpcap-devel" package
(or whatever the RH 6 package is that has the "libpcap" header files and
non-shared library) or whatever the tarball is for Slackware, installs
"pcap.h" but not "net/bpf.h", and "pcap.h" hasn't been changed not to
include "net/bpf.h", that's a bug in said package; complain to the
vendor.
> You'll need to download the libpcap source and do a "make install-incl" to
> install the headers that ethereal needs. I don't know why RedHat doesn't
> have a libpcap-devel package...
The Ethereal INSTALL file claims it does (in step 3, wherein it notes:
If you installed libpcap from a binary package, you may have to
install a "development" package; for example, there's
apparently a "libpcap0" Debian package, but it just includes a
shared library, a copyright notice, changelog files, and a
README file - you also need to install a "libpcap-dev" package
to get header files, a non-shared library, and the man page.
Similarly, Red Hat users will need to install a "libpcap-devel"
.rpm to go along with the "libpcap" .rpm.
), but that may have been the case for 5.x and maybe it changed its name
in 6.0.
