problems with AllMods

Russell Fulton <[email protected]> 14 Jun 2003 07:25:05 +1200
Newsgroups gmane.comp.security.ids.snort.snarf
Message-ID <1055532305.1783.58.camel@localhost>
Hi All,
	I have just started using snortsnarf with input from mysql on a new
machine. I have been running snortsnarf for years on other machines and
I have a perl script that runs hourly that works out various time
related parameters and feeds them to snortsnarf (via system).

Now the strange stuff.  If I invoke snortsnarf from the linux command
line things work more or less as expected, if I run it from my script I
get the following output:

2003/06/14.06:00 => 1055577780
2003/06/14.07:00 => 1055577780
Undefined subroutine &AllMods::load_module_named called at /home/snort/bin/snortsnarf.pl line 188.

and what is ever stranger is that after this I get this same error even
if I now invoke snortsnarf on the command line.  Clearly something in
the environment is getting changed this is screwing up the perl module
loading.  Logging out and back in resets things.

I did try modifying snortsnarf to explicitly reference the  AllMods as
SnortSnarf::AllMods but it made no difference.

Any ideas about what is wrong would be very helpful!

Umm... just spotted another problem with the output above the min and
max time, both seem to be translated to the same unixtime -- that will
explain why one time when I ran this by hand from the command line it
did not retrieve anything from the database.  I'll have a look at this
myself unless someone else know about this problem.


-- 
Russell Fulton, Network Security Officer, The University of Auckland,
New Zealand.