Snort: 2.9.2.3 pkg v. 2.2.1 /usr/local/lib/libdnet.1: unsupported file layout
-
Uninstalled, cleaned up left-over files and reinstalled from package installer.
Still getting /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout
-
Uninstalled, cleaned up left-over files and reinstalled from package installer.
Still getting /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout
What exactly did you clean up? I had that problem but now it's fixed for me (found new problems though).
You may want to try doing a pkg_info to see all installed packages and then manually removing every related package with pkg_delete -f. The important packages you should remove are libpcap, libnet, libdnet, daq and of course snort as far as I remember. Also make sure you're not behind a proxy which may be caching the old files. -
Uninstalled, cleaned up left-over files and reinstalled from package installer.
Still getting /libexec/ld-elf.so.1: /usr/local/lib/libdnet.1: unsupported file layout
What exactly did you clean up? I had that problem but now it's fixed for me (found new problems though).
You may want to try doing a pkg_info to see all installed packages and then manually removing every related package with pkg_delete -f. The important packages you should remove are libpcap, libnet, libdnet, daq and of course snort as far as I remember. Also make sure you're not behind a proxy which may be caching the old files.IT WORKED! I can't convey how much I appreciate the help after ten days of trying to get snort working again. I guess that one of the several packages I installed in that time had a bad libpcap, libnet, libdnet or daq package which wasn't being overwritten with a new snort install.
-
All is working great again. Would like to Thank jimp and the other Snort developers, that are working hard on the Snort package. Will donate again soon :D
Edit: To be clear, I'm talking about only this issue. Having other Snort issues similar to others on this forum.
-
This package does work now..however I could not stop the service. It says it's stopped, but blocking continues. You can stop the interfaces, but not the service via the dashboard.
To add SNORT HTTP_inspect suppression, (which ends up blocking pfsense.org if not added) I had to reboot the server. However, because pfsense.org was blocked, I ended up having the SQUID update fail partway through. On reboot…the PFSENSE install was damaged, so could shell in, but routing was broken. Ack.
Therefore fresh reinstall required....just a heads up! :-)