Re: undefined symbol: LibVersion error

[JJ Cummings <cummingsj () gmail com>]

Delete all of the *example* rules that are in
/usr/local/lib/snort_dynamicrules/



On Fri, Apr 16, 2010 at 9:14 AM, David Holder <david.holder () gmail com>wrote:

> Hi all,
>
> I installed Snort yesterday and configured it based on the guide provided
> on the ubuntu forums : http://ubuntuforums.org/showthread.php?t=919472
>
> I'm running ubuntu 9.10 server edition and the latest version of Snort and
> BASE.
>
> I've managed to configure the database, permissions, snort.conf but when I
> try and launch snort like so:
>
> snort -c /etc/snort/snort.conf
>
> I get the following:
>
> root@snort:~# snort -c /etc/snort/snort.conf
> Running in IDS mode
>
>         --== Initializing Snort ==--
> Initializing Output Plugins!
> Initializing Preprocessors!
> Initializing Plug-ins!
> Parsing Rules file "/etc/snort/snort.conf"
> PortVar 'HTTP_PORTS' defined :  [ 80 1220 2301 3128 7777 7779 8000 8008
> 8028 8080 8180 8888 9999 ]
> PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]
> PortVar 'ORACLE_PORTS' defined :  [ 1521 ]
> Detection:
>    Search-Method = AC-BNFA-Q
> Tagged Packet Limit: 256
> Loading dynamic engine
> /usr/local/lib/snort_dynamicengine/libsf_engine.so... done
> Loading all dynamic detection libs from
> /usr/local/lib/snort_dynamicrules...
>   Loading dynamic detection library
> /usr/local/lib/snort_dynamicrules/lib_sfdynamic_example_rule.so... ERROR:
> Failed to find LibVersion() function in
> /usr/local/lib/snort_dynamicrules/lib_sfdynamic_example_rule.so:
> /usr/local/lib/snort_dynamicrules/lib_sfdynamic_example_rule.so: undefined
> symbol: LibVersion
> Fatal Error, Quitting..
>
> Does anyone have any idea how I can resolve this issue?
>
> Thanks,
>
> David
>
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users