Re: [Snort-users] duplicate preprocessor error

From: Andrew R. Baker <andrewb(at)snort.org>
Date: Sat Feb 22 2003 - 19:17:47 EST

Ted Llewellyn wrote:
> I am getting an error when I run snort:

This error is independent of your snort.conf file. It inidicates that RegisterPreprocessor(...) was called twice with the same keyword value.   This should never happen with pristine sources. There are a few things you could to determine what is going on. First, replace the line:

FatalError("ERROR %s (%d) => Duplicate preprocessor keyword!\n",

                         file_name, file_line);

in plugbase.c (line 453-453 in recent CVS source) with

FatalError("ERROR => Duplicate preprocessor keyword: '%s'\n", keyword);

This should tell us what preprocessor is being registered twice.

Another thing to do is run the command

grep -r RegisterPreprocess *

in the src directory to identify all the calls to RegisterPreprocessor.   They should all be unique.

The final thing I would check is the function calls made from "InitPreprocessors" in plugbase.c. Make sure that a Setup function is not being called twice.

Hope this helps.

-A

---

This SF.net email is sponsored by: SlickEdit Inc. Develop an edge. The most comprehensive and flexible code editor you can use. Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial. www.slickedit.com/sourceforge

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Sat Feb 22 19:32:45 2003