Re: symbol error with 2.9.1

[Russ Combs <rcombs () sourcefire com>]

rand_open() is in dnet, which you can get from here:

http://code.google.com/p/libdnet/

What does ldd snort show for libdnet?

BTW, this is true for 2.9.0.1; 2.9.1 is under development.  ;)

On Wed, Nov 24, 2010 at 5:16 AM, Jason Haar <Jason.Haar () trimble co nz>wrote:

> Hi there
>
> I've got snort-2.9.1 running under CentOS-4.8 thanks to
> vincent () cojot name's  RPMs
>
> It works fine - until I copied the working binary RPMS onto another
> CentOS-4.8 box we have. On that box, when snort loads, right at the end
> it crashes (well that's obvious! ;-) with
>
> [ Number of patterns truncated to 20 bytes: 1334 ]
> pcap DAQ configured to passive.
> Acquiring network traffic from "eth2".
> Reload thread starting...
> Reload thread started, thread 0xb61dbba0 (12082)
> Decoding Ethernet
> /usr/sbin/snort-plain: symbol lookup error: /usr/sbin/snort-plain:
> undefined symbol: rand_open
>
> ldd shows no missing libraries, "rsync -a devserver:/lib/ /lib" shows no
> different libraries (also with /usr/lib), I ran ldconfig... I even
> downgraded from libpcap1-1.1.1 to libpcap1-1.0.0 (didn't recompile?) and
> it didn't make a difference.
>
> Any ideas?
>
> Thanks
>
> --
> Cheers
>
> Jason Haar
> Information Security Manager, Trimble Navigation Ltd.
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
>
>
>
> ------------------------------------------------------------------------------
> Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
> Tap into the largest installed PC base & get more eyes on your game by
> optimizing for Intel(R) Graphics Technology. Get started today with the
> Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
> http://p.sf.net/sfu/intelisp-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users