Snort mailing list archives

Re: ERROR: Failed to find InitializeDetection()


From: Alberto Colosi/SI/RM/GSI/it <alberto.colosi () sistinf it>
Date: Wed, 10 Sep 2008 21:27:28 +0200

I'm not so sure! maybe I'm wrong but:

----------------------------------------------------------
/usr/local/lib/snort_dynamicrule/libsf_ftptelnet_preproc.so: undefined
symbol:
InitializeDetection
Fatal Error, Quitting..
----------------------------------------------------------

should say that the file is in place but load badly "undefined symbol".

Have you used RPM package? I ever compile my packages :D
(best at least for me)



-------------------------------
Alberto Colosi
IBM Global Business Services
Sistemi Informativi S.P.A.
IT NetWork & Security Department
 *-* *-* *-*
SECURITY IS EVERYONE'S BUSINESS

Member of
IBM Information Security WW CoP





                                                                           
             Seth                                                          
             <sethsec () gmail co                                             
             m>                                                         To 
             Sent by:                  snort-users () lists sourceforge net   
             snort-users-bounc                                          cc 
             es@lists.sourcefo                                             
             rge.net                                               Subject 
                                       Re: [Snort-users] ERROR: Failed to  
                                       find InitializeDetection()          
             10/09/2008 17.34                                              
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




Ricardo,

Run: find / -name libsf_ftptelnet_preproc.so and figure out where that
file is located.

Your snort.conf is looking for that file here:
/usr/local/lib/snort_dynamicrule/libsf_ftptelnet_preproc.so and the
output is telling you it is having trouble finding it.

Once you figure out where that file is located, you can either change
the line in snort.conf, or you can relocate the files to where
snort.conf thinks they should be.

Regards,

Seth


On Sun, Sep 7, 2008 at 8:02 PM, Ricardo F. Teixeira
<ricardo.teixas () gmail com> wrote:
Hi people,

I'm having this strange error, when I try to run snort:

Loading dynamic engine /usr/local/lib/snort_dynamicengine/
libsf_engine.so... done
Loading all dynamic detection libs from /usr/local/lib/
snort_dynamicrule...
Loading dynamic detection library
/usr/local/lib/snort_dynamicrule/libsf_ftptelnet_preproc.so... ERROR:
Failed to find
InitializeDetection() function in /usr/local/lib/snort_dynamicrule/
libsf_ftptelnet_preproc.so:
/usr/local/lib/snort_dynamicrule/libsf_ftptelnet_preproc.so: undefined
symbol:
InitializeDetection
Fatal Error, Quitting..

Snort: Version 2.8.3 (Build 16)
OS: Slackware 12.1

Anybody knows what it means?

Best regards,

Ricardo F. Teixeira


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's
challenge
Build the coolest Linux based applications with Moblin SDK & win great
prizes
Grand prize is a trip for two to an Open Source event anywhere in the
world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's
challenge
Build the coolest Linux based applications with Moblin SDK & win great
prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: