[Snort-users] symbol error with 2.9.1

Jason Haar Jason.Haar at ...294...
Wed Nov 24 13:36:28 EST 2010


On 11/25/2010 04:07 AM, Russ Combs wrote:
> rand_open() is in dnet, which you can get from here:
>
> http://code.google.com/p/libdnet/
>
> What does ldd snort show for libdnet?

Brilliant - thanks for that. Now I see what happened. On the primary
box, 2.9.0.1 works fine, but a couple of days later some Dell management
tools were updated - which injected a new library dir into the standard
search path - and it includes it's own (older) libdnet. As snort was
running, it didn't care. Then I installed it onto the new box (with all
the same apps) and snort used that dnet instead of the system one.

We barely use any of the Dell tools, so I've commented out that path and
now snort is happy again :-)

>
> BTW, this is true for 2.9.0.1; 2.9.1 is under development.  ;)

In my defense, this probably would have happened to me with 2.9.1 too ;-)

Thanks!

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1





More information about the Snort-users mailing list