Your message dated Sun, 19 Jul 2020 12:48:33 +0000
with message-id <e1jx8k5-00080d...@fasolo.debian.org>
and subject line Bug#965320: fixed in daq 2.0.7-4
has caused the Debian Bug report #965320,
regarding daq: Missing sf_n_errors symbol in libsfbpf.so.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
965320: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965320
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: snort
Version: 2.9.15.1-2
Severity: grave
Dear Maintainer,
installation of 'snort' fails with a subprocess error (fresh install,
/etc/snort doesn't exist before installation. Accepting the propose
d network settings: 192.168.0.0/16). Aptitude output:
******************************************************************
Performing actions...
Retrieving bug reports... Done
Parsing Found/Fixed information... Done
Preconfiguring packages ...
Snort configuration: interface default not set, using 'eth0'
Selecting previously unselected package snort-common-libraries.
(Reading database ... 649619 files and directories currently installe
d.)
Preparing to unpack .../0-snort-common-libraries_2.9.15.1-2_amd64.deb
...
Unpacking snort-common-libraries (2.9.15.1-2) ...
Preparing to unpack .../1-snort-rules-default_2.9.15.1-2_all.deb ...
Unpacking snort-rules-default (2.9.15.1-2) ...
Preparing to unpack .../2-snort-common_2.9.15.1-2_all.deb ...
Unpacking snort-common (2.9.15.1-2) ...
Selecting previously unselected package libdaq2.
Preparing to unpack .../3-libdaq2_2.0.7-2_amd64.deb ...
Unpacking libdaq2 (2.0.7-2) ...
Selecting previously unselected package snort.
Preparing to unpack .../4-snort_2.9.15.1-2_amd64.deb ...
Unpacking snort (2.9.15.1-2) ...
Preparing to unpack .../5-oinkmaster_2.0-4_all.deb ...
Unpacking oinkmaster (2.0-4) ...
Setting up oinkmaster (2.0-4) ...
Setting up snort-common (2.9.15.1-2) ...
Setting up libdaq2 (2.0.7-2) ...
Setting up snort-rules-default (2.9.15.1-2) ...
Setting up snort-common-libraries (2.9.15.1-2) ...
Setting up snort (2.9.15.1-2) ...
Snort configuration: interface default not set, using 'eth0'
WARNING: tempfile is deprecated; consider using mktemp instead.
Job for snort.service failed because the control process exited with
error code.
See "systemctl status snort.service" and "journalctl -xe" for details
.
invoke-rc.d: initscript snort, action "start" failed.
● snort.service - LSB: Lightweight network intrusion detection system
Loaded: loaded (/etc/init.d/snort; generated)
Active: failed (Result: exit-code) since Fri 2020-06-05 13:41:4
3 CEST; 5ms ago
Docs: man:systemd-sysv-generator(8)
Process: 259261 ExecStart=/etc/init.d/snort start (code=exited,
status=1/FAILURE)
Jun 05 13:41:43 holly systemd[1]: Starting LSB: Lightweight network i
ntrusion detection system...
Jun 05 13:41:43 holly snort[259261]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface configuration, using
/etc/snort/snort.conf
Jun 05 13:41:43 holly snort[259273]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface configuration, using
/etc/sno
Jun 05 13:41:43 holly snort[259261]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface con
Jun 05 13:41:43 holly snort[259275]: Starting
Jun 05 13:41:43 holly systemd[1]: snort.service: Control process exit
ed, code=exited, status=1/FAILURE
Jun 05 13:41:43 holly systemd[1]: snort.service: Failed with result '
exit-code'.
Jun 05 13:41:43 holly systemd[1]: Failed to start LSB: Lightweight ne
twork intrusion detection system.
dpkg: error processing package snort (--configure):
installed snort package post-installation script subprocess returne
d error exit status 1
Processing triggers for systemd (245.5-3) ...
Processing triggers for man-db (2.9.2-1) ...
Processing triggers for libc-bin (2.30-8) ...
Errors were encountered while processing:
snort
[ Rootkit Hunter version 1.4.6 ]
File updated: searched for 181 files, found 152
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up snort (2.9.15.1-2) ...
Snort configuration: interface default set, using eth0
WARNING: tempfile is deprecated; consider using mktemp instead.
Job for snort.service failed because the control process exited with
error code.
See "systemctl status snort.service" and "journalctl -xe" for details
.
invoke-rc.d: initscript snort, action "start" failed.
● snort.service - LSB: Lightweight network intrusion detection system
Loaded: loaded (/etc/init.d/snort; generated)
Active: failed (Result: exit-code) since Fri 2020-06-05 13:41:5
4 CEST; 4ms ago
Docs: man:systemd-sysv-generator(8)
Process: 269896 ExecStart=/etc/init.d/snort start (code=exited,
status=1/FAILURE)
Jun 05 13:41:54 holly systemd[1]: Starting LSB: Lightweight network i
ntrusion detection system...
Jun 05 13:41:54 holly snort[269896]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface configuration, using
/etc/snort/snort.conf
Jun 05 13:41:54 holly snort[269907]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface configuration, using
/etc/sno
Jun 05 13:41:54 holly snort[269896]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface con
Jun 05 13:41:54 holly snort[269909]: Starting
Jun 05 13:41:54 holly systemd[1]: snort.service: Control process exit
ed, code=exited, status=1/FAILURE
Jun 05 13:41:54 holly systemd[1]: snort.service: Failed with result '
exit-code'.
Jun 05 13:41:54 holly systemd[1]: Failed to start LSB: Lightweight ne
twork intrusion detection system.
dpkg: error processing package snort (--configure):
installed snort package post-installation script subprocess returne
d error exit status 1
Errors were encountered while processing:
snort
Press Return to continue, 'q' followed by Return to quit.
******************************************************************
As recommended in the output, appending systemctl and journalctl outp
ut:
******************************************************************
$ systemctl status snort.service
● snort.service - LSB: Lightweight network intrusion detection system
Loaded: loaded (/etc/init.d/snort; generated)
Active: failed (Result: exit-code) since Fri 2020-06-05 13:41:5
4 CEST; 6min ago
Docs: man:systemd-sysv-generator(8)
Process: 269896 ExecStart=/etc/init.d/snort start (code=exited,
status=1/FAILURE)
Jun 05 13:41:54 holly systemd[1]: Starting LSB: Lightweight network i
ntrusion detection system...
Jun 05 13:41:54 holly snort[269896]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface co>
Jun 05 13:41:54 holly snort[269907]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface co>
Jun 05 13:41:54 holly snort[269896]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface con
Jun 05 13:41:54 holly snort[269909]: Starting
Jun 05 13:41:54 holly systemd[1]: snort.service: Control process exit
ed, code=exited, status=1/FAILURE
Jun 05 13:41:54 holly systemd[1]: snort.service: Failed with result '
exit-code'.
Jun 05 13:41:54 holly systemd[1]: Failed to start LSB: Lightweight ne
twork intrusion detection system.
******************************************************************
******************************************************************
$ journalctl -xe
Jun 05 13:41:54 holly systemd[1]: Failed to start LSB: Lightweight ne
twork intrusion detection system.
-- Subject: A start job for unit snort.service has failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- A start job for unit snort.service has finished with a failure.
--
-- The job identifier is 8917 and the job result is failed.
******************************************************************
In /etc/snort.conf, the following options specify non-existing files:
# path to dynamic preprocessor libraries
dynamicpreprocessor directory /usr/lib/i386-linux-gnu/snort_dynamicpr
eprocessor/
# path to base preprocessor engine
dynamicengine /usr/lib/i386-linux-gnu/snort_dynamicengine/libsf_engin
e.so
On my system the following directory and lib exist (amd64 system):
/usr/lib/x86_64-linux-gnu/snort_dynamicpreprocessor
/usr/lib/x86_64-linux-gnu/snort_dynamicengine/libsf_engine.so
Manually changing snort.conf and restarting snort still fails:
******************************************************************
● snort.service - LSB: Lightweight network intrusion detection system
Loaded: loaded (/etc/init.d/snort; generated)
Active: failed (Result: exit-code) since Fri 2020-06-05 14:05:2
8 CEST; 11s ago
Docs: man:systemd-sysv-generator(8)
Process: 303834 ExecStart=/etc/init.d/snort start (code=exited,
status=1/FAILURE)
Jun 05 14:05:28 holly systemd[1]: Starting LSB: Lightweight network i
ntrusion detection system...
Jun 05 14:05:28 holly snort[303834]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface co>
Jun 05 14:05:28 holly snort[303845]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface co>
Jun 05 14:05:28 holly snort[303834]: Starting Network Intrusion Detec
tion System : snort (eth0 no specific interface con
Jun 05 14:05:28 holly snort[303847]: Starting
Jun 05 14:05:28 holly systemd[1]: snort.service: Control process exit
ed, code=exited, status=1/FAILURE
Jun 05 14:05:28 holly systemd[1]: snort.service: Failed with result '
exit-code'.
Jun 05 14:05:28 holly systemd[1]: Failed to start LSB: Lightweight ne
twork intrusion detection system.
******************************************************************
Calling '/usr/sbin/snort -T -c │ /etc/snort/snort.conf' leads to the
following output:
******************************************************************
$ /usr/sbin/snort -T -c │ /etc/snort/snort.conf
/usr/sbin/snort: symbol lookup error: /usr/lib/x86_64-linux-gnu/libsf
bpf.so.0: undefined symbol: sf_n_errors
******************************************************************
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.6.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGU
AGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages snort depends on:
ii adduser 3.118
ii debconf [debconf-2.0] 1.5.74
ii init-system-helpers 1.57
ii libc6 2.30-8
ii libdaq2 2.0.7-2
ii libdumbnet1 1.12-9
ii liblzma5 5.2.4-1+b1
ii libnghttp2-14 1.41.0-2
ii libpcap0.8 1.9.1-4
ii libpcre3 2:8.39-12+b1
ii libssl1.1 1.1.1g-1
ii logrotate 3.16.0-3
ii lsb-base 11.1.0
ii net-tools 1.60+git20180626.aebd88e-1
ii rsyslog [system-log-daemon] 8.2004.0-1
ii snort-common 2.9.15.1-2
ii snort-common-libraries 2.9.15.1-2
ii snort-rules-default 2.9.15.1-2
ii zlib1g 1:1.2.11.dfsg-2
Versions of packages snort recommends:
ii iproute2 5.6.0-1
Versions of packages snort suggests:
pn snort-doc <none>
-- debconf information:
* snort/startup: boot
* snort/stats_treshold: 1
snort/options:
* snort/send_stats: true
snort/please_restart_manually:
snort/invalid_interface:
* snort/stats_rcpt: root
* snort/address_range: 192.168.0.0/16
* snort/interface: eth0
snort/disable_promiscuous: false
snort/config_parameters:
--- End Message ---
--- Begin Message ---
Source: daq
Source-Version: 2.0.7-4
Done: =?utf-8?q?Javier_Fern=C3=A1ndez-Sanguino_Pe=C3=B1a?= <j...@debian.org>
We believe that the bug you reported is fixed in the latest version of
daq, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 965...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Javier Fernández-Sanguino Peña <j...@debian.org> (supplier of updated daq
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 19 Jul 2020 12:45:32 +0200
Source: daq
Architecture: source
Version: 2.0.7-4
Distribution: unstable
Urgency: medium
Maintainer: Javier Fernández-Sanguino Peña <j...@debian.org>
Changed-By: Javier Fernández-Sanguino Peña <j...@debian.org>
Closes: 965320
Changes:
daq (2.0.7-4) unstable; urgency=medium
.
* debian/libdaq-dev.install: Remove static libraries (usr/lib/*/lib*.a)
* Restored files from original sources which were removed in the Debian
package ( aclocal.m4, Makefile.in, compile, configure, depcomp,
install-sh, ltmain.sh, libtool.m4, os-daq-modules/Makefile.in,
sfbpf/Makefile.in, api/Makefile.in)
* Disable patch debian/patches/fix_ftbfs_parallel_build as this prevents the
grammar symbols to be included in the libsfbpf library and leads to
Snort being able to start with the following error:
.
snort: symbol lookup error: libsfbpf.so.0: undefined symbol: sf_n_errors
.
The FTBFS was caused by tokens.h not being generated before libtool
was called to generate libsfbpf_la-sf_grammar.o, this has been fixed by
overriding dh_autobuild so 'make -j1' is called instead of 'make -j4'.
(Closes: 965320)
Checksums-Sha1:
9a8cc0bdb561a14e6d040bb858aefddfd6143922 1809 daq_2.0.7-4.dsc
4b629b12f0be3c775b24e39aae880d974ac68b46 7668 daq_2.0.7-4.debian.tar.xz
6eec13775fa36c54a99318e6af629015c2115688 7164 daq_2.0.7-4_i386.buildinfo
Checksums-Sha256:
c8dbad4a286ee4c9081e9e89532159dc7a7a488d14fde8e91143e656fa151d59 1809
daq_2.0.7-4.dsc
3b83e3ab534c1589eb5db48d759d9e6ea29839969663f3c3b2c3171c7c4d4456 7668
daq_2.0.7-4.debian.tar.xz
e2a31a24972c856bf756d3e8dec5bc74a90073adb6633d2446b6b21f5d511952 7164
daq_2.0.7-4_i386.buildinfo
Files:
e43f59835a277f8f11fc09e479d0e4b9 1809 libs optional daq_2.0.7-4.dsc
7e9d2d8e9e3a726d0ee82b27b92f646b 7668 libs optional daq_2.0.7-4.debian.tar.xz
adf05178597b36cbe69c0982cfe40d17 7164 libs optional daq_2.0.7-4_i386.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEFQ8Kq6ttIR3DT+AOix9vSKslf5gFAl8UPl4ACgkQix9vSKsl
f5hUKg//WnNu0YtjrqByzfr6VjMF6GF+T6dBWX+xNb59XVcC3LG5VbNXWDNiQWrV
s2fmOBei+57YG138F0lG648lboqDfBxYY5b/gdeIdgJ5qyO2rVm8BD8h7CXu19FP
XVPAC6Y3scdhP9rOo9Icdaz7KmeHYbjJpK/uhyFX9hRSItRYelQyRDF9G9R8P3Wz
SBrI9f0hBiA+tcAtj0gpWAMEQTo2wMHtShrmnsrLQP+iQl4IjBEEvCH7vLkdXAYT
/1vUNJ4HnBPUBCdx6mbRcPnHCdDm8Z/YWx4wfEZ/Gqg/r0bNCmJCEQ/dzWc2hz8h
Xp80Bk42XfuPUVlY56+uS2NxzEdQedLbAaDrjQ4SoUfix6vqrHE1waC3GYSB8/ky
sztMvMJ9DkCpbjlqEEMPCYOOF0Yr/fnqvfmOfw4aNKR2VvpqTQDdpb3lTBgFi3Hx
AvELtNxmWvyRXDttARHPXKNxsGJq5BeETCGbK5thgrw+85ZIgh5FQQyfBxpA14ub
jcjU0FYlecHAWEeUvqHRbkbOEN17RIY2F+rEyAE9fh2E+iMuPScNwpr0Sp1RkA+v
UFSCNvjZlXfUVxG/p9Inh3xnzELfz+h7rmNiWg0ISzAxFt5gkLRDDUOq0zBu2xAa
4SHmWEe8i8WaRdf7lt1cKMxVMi+woEsyZ4ALayI4NCHefuwZKFM=
=MC9P
-----END PGP SIGNATURE-----
--- End Message ---
