Re: non-fatal warnings when loading snort-extras (with warn-all)

[Noah Dietrich <noah_dietrich () 86penny org>]

Thank you Russ, i guessed that it was not an important warning, but I
wanted to make sure.

noah


On Tue, Jun 12, 2018 at 7:03 PM, Russ via Snort-devel <
snort-devel () lists snort org> wrote:

> That specific output is just noise.  The snort_extra DAQs are installed in
> the same plugin path.  One way to avoid that is to use something like
> --plugin-path $snort_extra/loggers:$snort_extra/inspectors:etc (omitting
> $snort_extra/daqs of course).  If you so those messages for a non-DAQ lib
> that is significant because those libs aren't loaded.
>
>
> On 6/12/18 11:09 AM, Noah Dietrich wrote:
>
> Hello,
>
> when loading the snort_extras, i get some warnings about undefined
> symbols, not sure if this is important or not (doesn't seem to affect
> snort).
>
> Snort 3 b245 running on Ubuntu 18 x64 in a virtual machine.
>
>
> noah@snort18x:~$ /usr/local/bin/snort --plugin-path
> /usr/local/lib/snort_extra -A alert_ex --warn-all
> --------------------------------------------------
> o")~   Snort++ 3.0.0-245
> --------------------------------------------------
> WARNING: /usr/local/lib/snort_extra/daqs/daq_regtest.so: undefined
> symbol: snort_plugins (/usr/local/lib/snort_extra/daqs/daq_regtest.so)
> WARNING: /usr/local/lib/snort_extra/daqs/daq_socket.so: undefined symbol:
> snort_plugins (/usr/local/lib/snort_extra/daqs/daq_socket.so)
> --------------------------------------------------
> pcap DAQ configured to passive.
>
> Snort successfully validated the configuration (with 2 warnings).
> o")~   Snort exiting
> noah@snort18x:~/snort_src/snort3_extra/build$
>
>
>
> _______________________________________________
> Snort-devel mailing listSnort-devel@lists.snort.orghttps://lists.snort.org/mailman/listinfo/snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
>
>
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists snort org
> https://lists.snort.org/mailman/listinfo/snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!