Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort: 2.9.2.3 pkg v. 2.2.1 /usr/local/lib/libdnet.1: unsupported file layout

    Scheduled Pinned Locked Moved pfSense Packages
    25 Posts 13 Posters 9.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      taryezveb
      last edited by

      2.0.1-RELEASE (amd64)
      built on Mon Dec 12 18:43:51 EST 2011
      FreeBSD 8.1-RELEASE-p6

      Snort: 2.9.2.3 pkg v. 2.2.1

      I keep getting the following error when trying to start Snort, just like others have stated[1,2]:

      /usr/local/bin/snort
      /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout
      

      It would help when starting from the GUI it would log this error. All I get is:

      Jun 16 21:06:55	SnortStartup[16291]: Interface Rule START for 0_14987_em1...
      Jun 16 21:06:54	SnortStartup[10750]: Toggle for 14987_em1...
      Jun 16 21:03:35	SnortStartup[50953]: Interface Rule START for 0_14987_em1...
      Jun 16 21:03:35	SnortStartup[45644]: Toggle for 14987_em1...
      Jun 16 21:02:27	SnortStartup[36940]: Interface Rule START for 0_14987_em1...
      Jun 16 21:02:27	SnortStartup[30983]: Toggle for 14987_em1...
      

      In the system log.

      Luckily I read this thread[1,2] and tried starting Snort from the terminal and got the error above.

      Note, that Snort was [re]installed a few times; before I saw[1,2]. But kept getting those messages in the system log.

      [1] http://forum.pfsense.org/index.php/topic,50301.0.html
      [2] http://forum.pfsense.org/index.php/topic,50301.msg268889.html#msg268889

      1 Reply Last reply Reply Quote 0
      • G
        Gradius
        last edited by

        Those crazy snort errors started with 2.9.2.3.  :P

        1 Reply Last reply Reply Quote 0
        • T
          taryezveb
          last edited by

          @Gradius:

          Those crazy snort errors started with 2.9.2.3.  :P

          Never saw that here until today. But I was busy with other stuff and had not done anything with Snort; since 6/12 which would not install due to the barnyard package not being ready.

          Thought would best for this error to have it's own thread. But if the mods don't agree, they will move it.

          1 Reply Last reply Reply Quote 0
          • S
            sprout
            last edited by

            I also have exactly the same issue as taryezveb, same 2.0.1-RELEASE (amd64) and the same errors :-(

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              [jimp@files ~/tmp]$ cp /usr/local/www/files/packages/amd64/8/All/libdnet-1.11_3.tbz .
              [jimp@files ~/tmp]$ tar xzf libdnet-1.11_3.tbz 
              [jimp@files ~/tmp]$ file lib/libdnet.1 
              lib/libdnet.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), not stripped
              [jimp@files ~/tmp]$ file lib/libdnet.so
              lib/libdnet.so: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), stripped
              

              It's not a 32-bit/64-bit mismatch. (Though feel free to check your own /usr/local/lib/libdnet.1 using 'file' the same way).

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • C
                compucoder
                last edited by

                I have the exact same problem. I am on AMD 64 as well. Exact same version listed by the others. I have had numerous issues with the box since updating Snort to the latest package. I have also lost LightSquid - getting Server 500 error.

                my system was running perfectly until I applied the latest Snort update.

                Any ideas what we can try?

                1 Reply Last reply Reply Quote 0
                • M
                  moe2006
                  last edited by

                  Hi, I have the same problem with unsupported file layout, snort does not start any longer.

                  Just installed Pfsense 2.0.1 in a virtual box. Downloading package snort (2.2.1) fails. But snort dev package installation is working…

                  1 Reply Last reply Reply Quote 0
                  • A
                    Atlantisman
                    last edited by

                    I am having the same error, running 2.0.1-RELEASE (amd64)  snort version 2.9.2.3 pkg v. 2.2.1

                    Is there a known fix for this yet?

                    Thanks.

                    1 Reply Last reply Reply Quote 0
                    • C
                      compucoder
                      last edited by

                      FYI,

                      I tried removing every single package installed post core install 2 months ago. I also cleaned up all config files and other files and folders left behind after the uninstall. I reinstalled just Snort by itself. I set it up right from scratch and when I started the interface I got the exact same error. It seems as if this is a problem with the Snort package or a dependency it is installing.

                      1 Reply Last reply Reply Quote 0
                      • M
                        mbmb
                        last edited by

                        Hello

                        I have the same problem as reported by many others, after upgrade of snort to 2.9.2.3 pkg v. 2.2.1, Snort won't start
                        anymore. When trying to start it from the command line i get:
                        /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout

                        I'm running 2.0.1-RELEASE (amd64)

                        Checking a few things:
                        file /libexec/ld-elf.so.1
                        /libexec/ld-elf.so.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), dynamically linked, stripped
                        file /usr/local/lib/libdnet.1
                        /usr/local/lib/libdnet.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), dynamically linked, not stripped

                        file /usr/local/bin/snort
                        /usr/local/bin/snort: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), dynamically linked (uses shared libs), for FreeBSD 8.1, stripped

                        Why is Snort a 32bit executable? in a supposedly 64bit package??????????????????

                        Hope someone comes up with a solution soon.

                        1 Reply Last reply Reply Quote 0
                        • D
                          digdug3
                          last edited by

                          Just wait for the dev to finish, or help him:

                          http://forum.pfsense.org/index.php/topic,50416.0.html

                          1 Reply Last reply Reply Quote 0
                          • M
                            mschiek01
                            last edited by

                            @mbmb:

                            Hello

                            I have the same problem as reported by many others, after upgrade of snort to 2.9.2.3 pkg v. 2.2.1, Snort won't start
                            anymore. When trying to start it from the command line i get:
                            /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout

                            I'm running 2.0.1-RELEASE (amd64)

                            Checking a few things:
                            file /libexec/ld-elf.so.1
                            /libexec/ld-elf.so.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), dynamically linked, stripped
                            file /usr/local/lib/libdnet.1
                            /usr/local/lib/libdnet.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), dynamically linked, not stripped

                            file /usr/local/bin/snort
                            /usr/local/bin/snort: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), dynamically linked (uses shared libs), for FreeBSD 8.1, stripped

                            Why is Snort a 32bit executable? in a supposedly 64bit package??????????????????

                            Hope someone comes up with a solution soon.

                            See this post:

                            http://forum.pfsense.org/index.php/topic,50609.0.html

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              remove/reinstall and see if this is OK now. I uploaded a new 64-bit binary package a few minutes ago.

                              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • F
                                feadin
                                last edited by

                                @jimp:

                                remove/reinstall and see if this is OK now. I uploaded a new 64-bit binary package a few minutes ago.

                                It runs now, but there's a new error:

                                Jun 19 13:36:19	snort[5114]: FATAL ERROR: /usr/local/etc/snort/snort_13270_re0/snort.conf(324) Unknown output plugin: "alert_pf"
                                Jun 19 13:36:19	snort[5114]: FATAL ERROR: /usr/local/etc/snort/snort_13270_re0/snort.conf(324) Unknown output plugin: "alert_pf"
                                

                                It only goes away if I disable the "Block Offenders" option, but I don't want to do that. That option is the main reason why I want to use snort.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mbmb
                                  last edited by

                                  @mschiek01:

                                  @mbmb:

                                  Hello

                                  I have the same problem as reported by many others, after upgrade of snort to 2.9.2.3 pkg v. 2.2.1, Snort won't start
                                  anymore. When trying to start it from the command line i get:
                                  /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout

                                  I'm running 2.0.1-RELEASE (amd64)

                                  Checking a few things:
                                  file /libexec/ld-elf.so.1
                                  /libexec/ld-elf.so.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), dynamically linked, stripped
                                  file /usr/local/lib/libdnet.1
                                  /usr/local/lib/libdnet.1: ELF 64-bit LSB shared object, x86-64, version 1 (FreeBSD), dynamically linked, not stripped

                                  file /usr/local/bin/snort
                                  /usr/local/bin/snort: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), dynamically linked (uses shared libs), for FreeBSD 8.1, stripped

                                  Why is Snort a 32bit executable? in a supposedly 64bit package??????????????????

                                  Hope someone comes up with a solution soon.

                                  See this post:

                                  http://forum.pfsense.org/index.php/topic,50609.0.html

                                  Tried the above post, no luck!

                                  Setting my hope to the newly build package

                                  1 Reply Last reply Reply Quote 0
                                  • jimpJ
                                    jimp Rebel Alliance Developer Netgate
                                    last edited by

                                    Whoops, how about now?

                                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                    Need help fast? Netgate Global Support!

                                    Do not Chat/PM for help!

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      sprout
                                      last edited by

                                      @jimp:

                                      remove/reinstall and see if this is OK now. I uploaded a new 64-bit binary package a few minutes ago.

                                      Great stuff jimp! the pig is flying again thanks to you :D

                                      1 Reply Last reply Reply Quote 0
                                      • jimpJ
                                        jimp Rebel Alliance Developer Netgate
                                        last edited by

                                        I'd prefer to see it roasting on a spit, but to each his own :p

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          feadin
                                          last edited by

                                          Great! It's working now, thank you! :)
                                          One last thing… the logs are all duplicated, both in the Alerts menu and in the System Logs too. Not only the alerts but all snort logs including the snort startup messages.
                                          Regular non-snort logs are fine.

                                          1 Reply Last reply Reply Quote 0
                                          • jimpJ
                                            jimp Rebel Alliance Developer Netgate
                                            last edited by

                                            I'd start a new thread for anything that isn't directly related to the error in the subject line.

                                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                            Need help fast? Netgate Global Support!

                                            Do not Chat/PM for help!

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.