[Snort-devel] [Snort-users] libsf_appid_preproc.so: undefined symbol errors

Joel Esler (jesler) jesler at ...3461...
Mon Aug 11 12:13:07 EDT 2014


To follow up, this was answered over on the openappid list.

On Aug 7, 2014, at 3:48 PM, Theron ZORBAS <theronzorbas at ...398...<mailto:theronzorbas at ...398...>> wrote:

Hi,

I'm just forwarding this e-mail to find more people interested in this issue.
Thanks.


On Wednesday, August 6, 2014 4:45 PM, Theron ZORBAS <theronzorbas at ...398...<mailto:theronzorbas at ...398...>> wrote:


Hi,

I'm using OpenBSD 5.5 amd64 and trying to use snort-2.9.7.0-beta with open-appid
I've successfully compiled it from source code with these parameters --disable-static-daq --enable-non-ether-decoders --enable-sourcefire --enable-open-appid

But Snort is failing with these error messages:
[Cut that lines ..................................]
Loading dynamic engine /usr/local/lib/snort_dynamicengine/libsf_engine.so... done
Loading all dynamic preprocessor libs from /usr/local/lib/snort_dynamicpreprocessor/...
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_appid_preproc.so... /usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_new'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_new'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_find'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_delete'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_add_before'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_remove_head'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_add'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_findfirst'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_gfindnext'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_static_free_all'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_findnext'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_find'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_gfindfirst'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_add'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_add_tail'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_new'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_count'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_init'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_first'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_next'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_delete'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_remove'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_find_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_remove_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_next_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_first_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_add_return_data_ptr'
ERROR: Failed to load /usr/local/lib/snort_dynamicpreprocessor//libsf_appid_preproc.so: Cannot load specified object
Fatal Error, Quitting..

Here is ldd output for file libsf_appid_preproc.so

# ldd /usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so
/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so:
        Start            End              Type Open Ref GrpRef Name
        00000713ecb1b000 00000713ed35f000 dlib 1    0   0      /usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so
        00000713f75e2000 00000713f7a51000 rlib 0    1   0      /usr/local/lib/libluajit-5.1.so.0.0
        00000713ec38c000 00000713ec79b000 rlib 0    1   0      /usr/local/lib/libdnet.so.1.0
        00000713f2b8b000 00000713f2fcb000 rlib 0    1   0      /usr/local/lib/libpcre.so.3.0
        00000713eb1f6000 00000713eb61a000 rlib 0    1   0      /usr/lib/libpcap.so.8.0
        00000713eebfa000 00000713ef022000 rlib 0    2   0      /usr/lib/libm.so.9.0
        00000713f119f000 00000713f175d000 rlib 0    1   0      /usr/lib/libcrypto.so.28.0
        00000713ef022000 00000713ef426000 rlib 0    1   0      /usr/local/lib/libdaq.so.2.0
        00000713f0cac000 00000713f10c1000 rlib 0    1   0      /usr/lib/libz.so.5.0
        00000713eb6f2000 00000713ebb14000 rlib 0    1   0      /usr/local/lib/liblzma.so.1.0
        00000713f7a51000 00000713f7e63000 rlib 0    2   0      /usr/lib/libpthread.so.18.0



I could not understand how to handle this issue?
Thanks for your help.

P.S. I'm not a member of the list.

--
Theron




------------------------------------------------------------------------------
Infragistics Professional
Build stunning WinForms apps today!
Reboot your WinForms applications with our WinForms controls.
Build a bridge from your legacy apps to the future.
http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20140811/5edd07d9/attachment.html>


More information about the Snort-devel mailing list