[Snort-openappid] libsf_appid_preproc.so: undefined symbol errors

Costas Kleopa (ckleopa) ckleopa at ...5...
Thu Aug 7 16:45:16 EDT 2014


Unfortunately we couldn’t see or reproduce this issue yet. All the undefined symbols are in the library libsf_dynamic_preproc.a. This library is in the location /usr/local/lib/snort/dynamic_preproc/. Since this library is not dynamically loaded, we are assuming his snort.conf file cannot cause this issue.

Can you provide us the full snort command you’re using to test this?

Can you make sure you do another clean build?

> sudo make clean
> ./configure --disable-static-daq --enable-non-ether-decoders --enable-sourcefire --enable-open-appid
> make
> sudo make install

If this doesn’t work for you then please send us the snort.conf and output of ‘configure', ‘make' and 'make install' commands.

Thanks
Costas

From: Theron ZORBAS <theronzorbas at ...36...<mailto:theronzorbas at ...36...>>
Reply-To: Theron ZORBAS <theronzorbas at ...36...<mailto:theronzorbas at ...36...>>
Date: Wednesday, August 6, 2014 at 9:45 AM
To: "snort-openappid at lists.sourceforge.net<mailto:snort-openappid at ...7...rceforge.net>" <snort-openappid at lists.sourceforge.net<mailto:snort-openappid at lists.sourceforge.net>>
Subject: [Snort-openappid] libsf_appid_preproc.so: undefined symbol errors

Hi,

I'm using OpenBSD 5.5 amd64 and trying to use snort-2.9.7.0-beta with open-appid
I've successfully compiled it from source code with these parameters --disable-static-daq --enable-non-ether-decoders --enable-sourcefire --enable-open-appid

But Snort is failing with these error messages:
[Cut that lines ..................................]
Loading dynamic engine /usr/local/lib/snort_dynamicengine/libsf_engine.so... done
Loading all dynamic preprocessor libs from /usr/local/lib/snort_dynamicpreprocessor/...
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... done
  Loading dynamic preprocessor library /usr/local/lib/snort_dynamicpreprocessor//libsf_appid_preproc.so... /usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_new'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_new'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_find'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_delete'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_add_before'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_remove_head'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_add'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_findfirst'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_gfindnext'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_static_free_all'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfghash_findnext'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_find'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_gfindfirst'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_add'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_add_tail'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_new'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_count'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_init'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_first'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_next'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_delete'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_remove'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_find_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_remove_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_next_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sflist_first_node'
/usr/local/bin/snort:/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so: undefined symbol 'sfxhash_add_return_data_ptr'
ERROR: Failed to load /usr/local/lib/snort_dynamicpreprocessor//libsf_appid_preproc.so: Cannot load specified object
Fatal Error, Quitting..

Here is ldd output for file libsf_appid_preproc.so

# ldd /usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so
/usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so:
        Start            End              Type Open Ref GrpRef Name
        00000713ecb1b000 00000713ed35f000 dlib 1    0   0      /usr/local/lib/snort_dynamicpreprocessor/libsf_appid_preproc.so
        00000713f75e2000 00000713f7a51000 rlib 0    1   0      /usr/local/lib/libluajit-5.1.so.0.0
        00000713ec38c000 00000713ec79b000 rlib 0    1   0      /usr/local/lib/libdnet.so.1.0
        00000713f2b8b000 00000713f2fcb000 rlib 0    1   0      /usr/local/lib/libpcre.so.3.0
        00000713eb1f6000 00000713eb61a000 rlib 0    1   0      /usr/lib/libpcap.so.8.0
        00000713eebfa000 00000713ef022000 rlib 0    2   0      /usr/lib/libm.so.9.0
        00000713f119f000 00000713f175d000 rlib 0    1   0      /usr/lib/libcrypto.so.28.0
        00000713ef022000 00000713ef426000 rlib 0    1   0      /usr/local/lib/libdaq.so.2.0
        00000713f0cac000 00000713f10c1000 rlib 0    1   0      /usr/lib/libz.so.5.0
        00000713eb6f2000 00000713ebb14000 rlib 0    1   0      /usr/local/lib/liblzma.so.1.0
        00000713f7a51000 00000713f7e63000 rlib 0    2   0      /usr/lib/libpthread.so.18.0



I could not understand how to handle this issue?
Thanks for your help.

P.S. I'm not a member of the list.

--
Theron


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20140807/e5537cce/attachment.html>


More information about the Snort-openappid mailing list