[Snort-users] symbol error with 2.9.1

Jason Haar Jason.Haar at ...294...
Wed Nov 24 05:16:16 EST 2010

Hi there

I've got snort-2.9.1 running under CentOS-4.8 thanks to
vincent at ...15035...'s  RPMs

It works fine - until I copied the working binary RPMS onto another
CentOS-4.8 box we have. On that box, when snort loads, right at the end
it crashes (well that's obvious! ;-) with

[ Number of patterns truncated to 20 bytes: 1334 ]
pcap DAQ configured to passive.
Acquiring network traffic from "eth2".
Reload thread starting...
Reload thread started, thread 0xb61dbba0 (12082)
Decoding Ethernet
/usr/sbin/snort-plain: symbol lookup error: /usr/sbin/snort-plain:
undefined symbol: rand_open

ldd shows no missing libraries, "rsync -a devserver:/lib/ /lib" shows no
different libraries (also with /usr/lib), I ran ldconfig... I even
downgraded from libpcap1-1.1.1 to libpcap1-1.0.0 (didn't recompile?) and
it didn't make a difference.

Any ideas?



Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

More information about the Snort-users mailing list