Public bug reported:
Binary package hint: snort
Upgraded with adept-manager --dist-upgrade last night.
snort version installed: 2.7.0-2ubuntu1.
installed: snort, snort-common, snort-rules-default, snort-mysql
after installing and adapting config file for the new dynamic
preprocessors, snort fails to start with:
Oct 5 01:50:20 azrael snort[29203]: FATAL ERROR: Failed to load
/usr/lib/snort_dynamicengine/libsf_engine.so:
/usr/lib/snort_dynamicengine/libsf_engine.so: wrong ELF class:
ELFCLASS32
The snort.conf line affecting this behaviour is:
###################################################
# Step #2: Configure dynamic loaded libraries
#
# If snort was configured to use dynamically loaded libraries,
# those libraries can be loaded here.
#
# Each of the following configuration options can be done via
# the command line as well.
#
# Load all dynamic preprocessors from the install path
# (same as command line option --dynamic-preprocessor-lib-dir)
#
dynamicpreprocessor directory /usr/lib/snort_dynamicpreprocessor/
#
# Load a specific dynamic preprocessor library from the install path
# (same as command line option --dynamic-preprocessor-lib)
#
# dynamicpreprocessor file
/usr/lib/snort_dynamicpreprocessor/libdynamicexample.so
#
# Load a dynamic engine from the install path
# (same as command line option --dynamic-engine-lib)
#
dynamicengine /usr/lib/snort_dynamicengine/libsf_engine.so
#
Same happens with the files in /usr/lib/snort_dynamicpreprocessor/
the file command shows:
libsf_dcerpc_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386,
version 1 (SYSV), stripped
libsf_dns_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386,
version 1 (SYSV), stripped
libsf_ftptelnet_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386,
version 1 (SYSV), stripped
libsf_smtp_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386,
version 1 (SYSV), stripped
libsf_ssh_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386,
version 1 (SYSV), stripped
looks like the dynamic libs provided with snort in amd64 architecture
are i386 versions.
** Affects: snort (Ubuntu)
Importance: Undecided
Status: New
--
Snort is not starting in amd64 - gutsy
https://bugs.launchpad.net/bugs/149341
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
