1、准备工作
目前最新的版本👇,直接点击进行下载,libpcap是编译tcpdump必须的依赖库
1.1 tcpdump-4.99.0.tar.gz
1.2 libpcap-1.10.0.tar.gz
2、配置并编译
2.1 解压libpcap-1.10.0.tar.gz并进入libpcap-1.10.0目录
tar -xzvf libpcap-1.10.0.tar.gz
cd libpcap-1.10.0
2.2 配置libpcap编译选项
./configure --prefix=$PWD/build --host=arm-hisiv400-linux --with-pcap=linux --disable-ipv6 --target=arm-hisiv400-linux
2.3 编译并安装libpcap
make (编译不过?别急,俺碰到的编译错误都在编译错误集合中👇)
make install
2.4 解压tcpdump-4.99.0.tar.gz并进入tcpdump-4.99.0目录
tar -xzvf tcpdump-4.99.0.tar.gz
cd tcpdump-4.99.0
2.5 配置tcpdump编译选项
./configure --prefix=$PWD/build --host=arm-hisiv400-linux
2.6 编译并安装tcpdump
make
make install
3、编译错误集合
3.1 在编译libpcap过程中出现👇报错
./bpf_image.c: In function ‘bpf_image’:
./bpf_image.c:309:15: error: ‘BPF_MOD’ undeclared (first use in this function)
case BPF_ALU|BPF_MOD|BPF_X:
^
./bpf_image.c:309:15: note: each undeclared identifier is reported only once for each function it appears in
./bpf_image.c:324:15: error: ‘BPF_XOR’ undeclared (first use in this function)
case BPF_ALU|BPF_XOR|BPF_X:
^
make: *** [bpf_image.o] Error 1
解决方案
1. 进入libpcap-1.10.0/pcap目录下,打开bpf.h文件
2. 将以下👇截图中的红框代码进行注释
3.将以下👇代码进行替换
//#define BPF_STMT(code, k) { (u_short)(code), 0, 0, k }
//#define BPF_JUMP(code, k, jt, jf) { (u_short)(code), jt, jf, k }
替换为:
#ifdef BPF_STMT
#undef BPF_STMT
#endif
#define BPF_STMT(code, k) { (u_short)(code), 0, 0, k }
#ifdef BPF_JUMP
#undef BPF_JUMP
#endif
#define BPF_JUMP(code, k, jt, jf) { (u_short)(code), jt, jf, k }
到此tcpdump交叉编译完成,赶紧移植过去试试吧!