Re: duplicate preprocessor error

["Andrew R. Baker" <andrewb () snort org>]

Ted Llewellyn wrote:
>  I am getting an error when I run snort:
>
> Initializing Preprocessors!
> ERROR (null) (0) => Duplicate preprocessor keyword!
> Fatal Error, Quitting..

This error is independent of your snort.conf file.  It inidicates that 
RegisterPreprocessor(...) was called twice with the same keyword value. 
 This should never happen with pristine sources.  There are a few 
things you could to determine what is going on.  First, replace the line:

FatalError("ERROR %s (%d) => Duplicate preprocessor keyword!\n",
                        file_name, file_line);

in plugbase.c (line 453-453 in recent CVS source) with

FatalError("ERROR => Duplicate preprocessor keyword: '%s'\n", keyword);

This should tell us what preprocessor is being registered twice.


Another thing to do is run the command

grep -r RegisterPreprocess *

in the src directory to identify all the calls to RegisterPreprocessor. 
 They should all be unique.

The final thing I would check is the function calls made from 
"InitPreprocessors" in plugbase.c.  Make sure that a Setup function is 
not being called twice.

Hope this helps.

-A



-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users