I see. PulledPork in my case did not like the same malware-other.so:

Generating Stub Rules....
Generating shared object stubs via:/usr/local/snort/bin/snort -c /usr/local/snort/etc/snort.conf --dump-dynamic-rules=/tmp/tha_rules/so_rules/
An error occurred:   Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/malware-other.so... ERROR: Failed to load /usr/local/snort/lib/snort_dynamicrules/malware-other.so: /usr/local/snort/lib/snort_dynamicrules/malware-other.so: undefined symbol: sin

An error occurred: Fatal Error, Quitting..

From: Snort-users <snort-users-bounces@lists.snort.org> on behalf of James Lay <jlay@slave-tothe-box.net>
Sent: Friday, June 15, 2018 12:44 AM
To: Patrick Mullen (pamullen)
Cc: snort-users@lists.snort.org
Subject: Re: [Snort-users] Ubuntu 18 and so rules error

Yes....of note I am not compiling the rules, just using pulled pork to do it's thing.


On 2018-06-14 08:50, Patrick Mullen (pamullen) wrote:

To be clear, my example code ran first try?  Does snort continue to throw that error?





From: James Lay <jlay@slave-tothe-box.net>


Ran like a champ:

<snip screenshot>

now we're having some fun!


On 2018-06-13 09:20, Patrick Mullen (pamullen) wrote:



Here's a quick test.  If this doesn't work, then install whatever google tells you and it should fix the snort loading problem.  If it does, then I'm a little confused and we'll have to look into this further.