Re: non-fatal warnings when loading snort-extras (with warn-all)

[Russ via Snort-devel <snort-devel () lists snort org>]

That specific output is just noise.  The snort_extra DAQs are installed 
in the same plugin path.  One way to avoid that is to use something like 
--plugin-path $snort_extra/loggers:$snort_extra/inspectors:etc (omitting 
$snort_extra/daqs of course).  If you so those messages for a non-DAQ 
lib that is significant because those libs aren't loaded.

On 6/12/18 11:09 AM, Noah Dietrich wrote:
> Hello,
>
> when loading the snort_extras, i get some warnings about undefined 
> symbols, not sure if this is important or not (doesn't seem to affect 
> snort).
>
> Snort 3 b245 running on Ubuntu 18 x64 in a virtual machine.
>
>
> noah@snort18x:~$ /usr/local/bin/snort --plugin-path 
> /usr/local/lib/snort_extra -A alert_ex --warn-all
> --------------------------------------------------
> o")~   Snort++ 3.0.0-245
> --------------------------------------------------
> WARNING: /usr/local/lib/snort_extra/daqs/daq_regtest.so: undefined 
> symbol: snort_plugins (/usr/local/lib/snort_extra/daqs/daq_regtest.so)
> WARNING: /usr/local/lib/snort_extra/daqs/daq_socket.so: undefined 
> symbol: snort_plugins (/usr/local/lib/snort_extra/daqs/daq_socket.so)
> --------------------------------------------------
> pcap DAQ configured to passive.
>
> Snort successfully validated the configuration (with 2 warnings).
> o")~   Snort exiting
> noah@snort18x:~/snort_src/snort3_extra/build$
>
>
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists snort org
> https://lists.snort.org/mailman/listinfo/snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!