Talk:Packet Tracing

I had trouble getting ssldump to compile on my CentOS 4.4 server, as I was getting this error from make:

gcc -g -O2  -DHAVE_LIBM=1 -DHAVE_SYS_TIME_H=1 -DSTDC_HEADERS=1 -DTIME_WITH_SYS_TIME=1
 -DSIZEOF_UNSIGNED_SHORT=2  -DSIZEOF_UNSIGNED_INT=4 -DSIZEOF_UNSIGNED_LONG=4 -DSIZEOF_UNSIGNED_LONG_LONG=8
-DRETSIGTYPE=void -DHAVE_VPRINTF=1  -DHAVE_STRDUP=1   -c -o pcap-snoop.o ./base/pcap-snoop.c
-DOPENSSL  -D_BSD_SOURCE=1 -DLINUX   -I./base/    -I./null/   -I./ssl/   -Icommon/include/ -I./null/
-I./ssl/ -I/usr/include  
./base/pcap-snoop.c:52:21: net/bpf.h: No such file or directory
./base/pcap-snoop.c: In function `main':
./base/pcap-snoop.c:207: warning: passing arg 2 of `signal' from incompatible pointer type
./base/pcap-snoop.c:329: warning: passing arg 3 of `pcap_loop' from incompatible pointer type
make: *** [pcap-snoop.o] Error 1

The solution was to link the bpf.h file as shown.

ln -s /usr/include/pcap-bpf.h /usr/include/net/bpf.h