[Snort-users] symbol error with 2.9.1

Russ Combs rcombs at ...1935...
Wed Nov 24 10:07:37 EST 2010


rand_open() is in dnet, which you can get from here:

http://code.google.com/p/libdnet/

What does ldd snort show for libdnet?

BTW, this is true for 2.9.0.1; 2.9.1 is under development.  ;)

On Wed, Nov 24, 2010 at 5:16 AM, Jason Haar <Jason.Haar at ...294...>wrote:

> Hi there
>
> I've got snort-2.9.1 running under CentOS-4.8 thanks to
> vincent at ...15035...'s  RPMs
>
> It works fine - until I copied the working binary RPMS onto another
> CentOS-4.8 box we have. On that box, when snort loads, right at the end
> it crashes (well that's obvious! ;-) with
>
> [ Number of patterns truncated to 20 bytes: 1334 ]
> pcap DAQ configured to passive.
> Acquiring network traffic from "eth2".
> Reload thread starting...
> Reload thread started, thread 0xb61dbba0 (12082)
> Decoding Ethernet
> /usr/sbin/snort-plain: symbol lookup error: /usr/sbin/snort-plain:
> undefined symbol: rand_open
>
> ldd shows no missing libraries, "rsync -a devserver:/lib/ /lib" shows no
> different libraries (also with /usr/lib), I ran ldconfig... I even
> downgraded from libpcap1-1.1.1 to libpcap1-1.0.0 (didn't recompile?) and
> it didn't make a difference.
>
> Any ideas?
>
> Thanks
>
> --
> Cheers
>
> Jason Haar
> Information Security Manager, Trimble Navigation Ltd.
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
>
>
>
> ------------------------------------------------------------------------------
> Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
> Tap into the largest installed PC base & get more eyes on your game by
> optimizing for Intel(R) Graphics Technology. Get started today with the
> Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
> http://p.sf.net/sfu/intelisp-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20101124/8a88d462/attachment.html>


More information about the Snort-users mailing list