That specific output is just noise.  The snort_extra DAQs are installed in the same plugin path.  One way to avoid that is to use something like --plugin-path $snort_extra/loggers:$snort_extra/inspectors:etc (omitting $snort_extra/daqs of course).  If you so those messages for a non-DAQ lib that is significant because those libs aren't loaded.

On 6/12/18 11:09 AM, Noah Dietrich wrote:
Hello,

when loading the snort_extras, i get some warnings about undefined symbols, not sure if this is important or not (doesn't seem to affect snort).  

Snort 3 b245 running on Ubuntu 18 x64 in a virtual machine.


noah@snort18x:~$ /usr/local/bin/snort --plugin-path /usr/local/lib/snort_extra -A alert_ex --warn-all
--------------------------------------------------
o")~   Snort++ 3.0.0-245
--------------------------------------------------
WARNING: /usr/local/lib/snort_extra/daqs/daq_regtest.so: undefined symbol: snort_plugins (/usr/local/lib/snort_extra/daqs/daq_regtest.so)
WARNING: /usr/local/lib/snort_extra/daqs/daq_socket.so: undefined symbol: snort_plugins (/usr/local/lib/snort_extra/daqs/daq_socket.so)
--------------------------------------------------
pcap DAQ configured to passive.

Snort successfully validated the configuration (with 2 warnings).
o")~   Snort exiting
noah@snort18x:~/snort_src/snort3_extra/build$ 



_______________________________________________
Snort-devel mailing list
Snort-devel@lists.snort.org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!