Snort mailing list archives

Re: Snort 2.9.6 and DPX 1.6 test error: undefined libversion


From: "Russ Combs (rucombs)" <rucombs () cisco com>
Date: Wed, 19 Feb 2014 15:31:57 +0000


________________________________
From: Hai Minh Nguyen [lightsea90 () gmail com]
Sent: Tuesday, February 18, 2014 9:14 PM
To: Russ Combs (rucombs)
Cc: snort-devel () lists sourceforge net
Subject: Re: [Snort-devel] Snort 2.9.6 and DPX 1.6 test error: undefined libversion

I'm working on Snort 2.9.6.0, the newest release, and setup.sh is fine.

I did some workaround and figure out that Snort 2.9.6.0 and DPX 1.6 did work like miracle on CentOS 6. But my real 
system is Debian 7. I tested on Debian, Ubuntu but all failed. Just have no idea why :|

OK, send your config.log from Ubuntu.


On Tue, Feb 18, 2014 at 9:39 PM, Russ Combs (rucombs) <rucombs () cisco com<mailto:rucombs () cisco com>> wrote:

________________________________
From: Hai Minh Nguyen [lightsea90 () gmail com<mailto:lightsea90 () gmail com>]
Sent: Monday, February 17, 2014 9:03 PM
To: Russ Combs (rucombs)
Cc: snort-devel () lists sourceforge net<mailto:snort-devel () lists sourceforge net>
Subject: Re: [Snort-devel] Snort 2.9.6 and DPX 1.6 test error: undefined libversion

FYI, I'm sure Snort loaded the newest version.


On Tue, Feb 18, 2014 at 8:36 AM, Hai Minh Nguyen <lightsea90 () gmail com<mailto:lightsea90 () gmail com>> wrote:
My output is:
00000e34 t LibVersion

So that means LibVersion is local. Is that the problem?

Yes, but maybe not the root cause.  What version of Snort are you building against?  Did you double check your setup.sh?


On Tue, Feb 18, 2014 at 12:57 AM, Russ Combs (rucombs) <rucombs () cisco com<mailto:rucombs () cisco com>> wrote:
Are you sure Snort isn't trying to load the old version?

If you are on Linux, what does this output?

    nm lib/snort_dynamicpreprocessor/libdpx.so | grep LibVersion

If you see something like the following, libdpx.so is not the problem:

    0000000000001485 T LibVersion

________________________________
From: Hai Minh Nguyen [lightsea90 () gmail com<mailto:lightsea90 () gmail com>]
Sent: Monday, February 17, 2014 4:42 AM
To: snort-devel () lists sourceforge net<mailto:snort-devel () lists sourceforge net>
Subject: [Snort-devel] Snort 2.9.6 and DPX 1.6 test error: undefined libversion

I'm gonna create a dynamic preprocessor for Snort 2.9.6 using DPX 1.6. I followed the README in DPX 1.6, compiled Snort 
and build the sample prep (dpx) without error. But when I tested this, Snort failed to load the prep. It raised this 
error:

    Loading all dynamic preprocessor libs from lib/snort_dynamicpreprocessor...

    Loading dynamic preprocessor library lib/snort_dynamicpreprocessor/libdpx.so... ERROR: Failed to find LibVersion() 
function in lib/snort_dynamicpreprocessor/libdpx.so: lib/snort_dynamicpreprocessor/libdpx.so: undefined symbol: 
LibVersion

    Fatal Error, Quitting..

Is there any idea why and how to solve this?

--
Kiếm ma độc cô cầu bại - Ôi, một đời oanh liệt, chỉ mong được chiến bại một lần, nhưng chưa ai qua nổi quá tam chiêu!!!



--
Kiếm ma độc cô cầu bại - Ôi, một đời oanh liệt, chỉ mong được chiến bại một lần, nhưng chưa ai qua nổi quá tam chiêu!!!



--
Kiếm ma độc cô cầu bại - Ôi, một đời oanh liệt, chỉ mong được chiến bại một lần, nhưng chưa ai qua nổi quá tam chiêu!!!



--
Kiếm ma độc cô cầu bại - Ôi, một đời oanh liệt, chỉ mong được chiến bại một lần, nhưng chưa ai qua nổi quá tam chiêu!!!
------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: