Re: non-fatal warnings when loading snort-extras (with warn-all)
Noah Dietrich <[email protected]> Wed, 13 Jun 2018 06:51:41 +0200
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <CA+N0JEwrdYNnJqvZS3bfAAx7t+sqg8HkkEht3eN=S-8CyX5wWQ@mail.gmail.com> |
Thank you Russ, i guessed that it was not an important warning, but I wanted to make sure. noah On Tue, Jun 12, 2018 at 7:03 PM, Russ via Snort-devel < [email protected]> wrote: > That specific output is just noise. The snort_extra DAQs are installed in > the same plugin path. One way to avoid that is to use something like > --plugin-path $snort_extra/loggers:$snort_extra/inspectors:etc (omitting > $snort_extra/daqs of course). If you so those messages for a non-DAQ lib > that is significant because those libs aren't loaded. > > > On 6/12/18 11:09 AM, Noah Dietrich wrote: > > Hello, > > when loading the snort_extras, i get some warnings about undefined > symbols, not sure if this is important or not (doesn't seem to affect > snort). > > Snort 3 b245 running on Ubuntu 18 x64 in a virtual machine. > > > noah@snort18x:~$ /usr/local/bin/snort --plugin-path > /usr/local/lib/snort_extra -A alert_ex --warn-all > -------------------------------------------------- > o")~ Snort++ 3.0.0-245 > -------------------------------------------------- > WARNING: /usr/local/lib/snort_extra/daqs/daq_regtest.so: undefined > symbol: snort_plugins (/usr/local/lib/snort_extra/daqs/daq_regtest.so) > WARNING: /usr/local/lib/snort_extra/daqs/daq_socket.so: undefined symbol: > snort_plugins (/usr/local/lib/snort_extra/daqs/daq_socket.so) > -------------------------------------------------- > pcap DAQ configured to passive. > > Snort successfully validated the configuration (with 2 warnings). > o")~ Snort exiting > noah@snort18x:~/snort_src/snort3_extra/build$ > > > > _______________________________________________ > Snort-devel mailing [email protected]://lists.snort.org/mailman/listinfo/snort-devel > > Please visit http://blog.snort.org for the latest news about Snort! > > > > _______________________________________________ > Snort-devel mailing list > [email protected] > https://lists.snort.org/mailman/listinfo/snort-devel > > Please visit http://blog.snort.org for the latest news about Snort! > > _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!