Snort is not starting in amd64 - gutsy

Bug #149341 reported by Salva Ferrer
2
Affects Status Importance Assigned to Milestone
snort (Debian)
Fix Released
Unknown
snort (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: snort

Upgraded with adept-manager --dist-upgrade last night.

snort version installed: 2.7.0-2ubuntu1.

installed: snort, snort-common, snort-rules-default, snort-mysql

after installing and adapting config file for the new dynamic preprocessors, snort fails to start with:

Oct 5 01:50:20 azrael snort[29203]: FATAL ERROR: Failed to load /usr/lib/snort_dynamicengine/libsf_engine.so: /usr/lib/snort_dynamicengine/libsf_engine.so: wrong ELF class: ELFCLASS32

The snort.conf line affecting this behaviour is:
###################################################
# Step #2: Configure dynamic loaded libraries
#
# If snort was configured to use dynamically loaded libraries,
# those libraries can be loaded here.
#
# Each of the following configuration options can be done via
# the command line as well.
#
# Load all dynamic preprocessors from the install path
# (same as command line option --dynamic-preprocessor-lib-dir)
#
dynamicpreprocessor directory /usr/lib/snort_dynamicpreprocessor/
#
# Load a specific dynamic preprocessor library from the install path
# (same as command line option --dynamic-preprocessor-lib)
#
# dynamicpreprocessor file /usr/lib/snort_dynamicpreprocessor/libdynamicexample.so
#
# Load a dynamic engine from the install path
# (same as command line option --dynamic-engine-lib)
#
dynamicengine /usr/lib/snort_dynamicengine/libsf_engine.so
#

Same happens with the files in /usr/lib/snort_dynamicpreprocessor/

the file command shows:

libsf_dcerpc_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped
libsf_dns_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped
libsf_ftptelnet_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped
libsf_smtp_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped
libsf_ssh_preproc.so.0.0.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped

looks like the dynamic libs provided with snort in amd64 architecture are i386 versions.

Revision history for this message
Salva Ferrer (salva-ferrer) wrote :

The dynamic files I a referring to are installed by snort-common, so the issue is with this package, all other snort packages seem correct.

Changed in snort:
status: Unknown → Fix Released
Revision history for this message
Wouter Stomp (wouterstomp-deactivatedaccount) wrote :

Fixed in 2.7.0-6

Changed in snort:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.