From dheeraj.gupta4 at gmail.com Wed May 20 00:17:38 2020 From: dheeraj.gupta4 at gmail.com (Dheeraj Gupta) Date: Wed, 20 May 2020 12:47:38 +0530 Subject: [Zeek-Dev] Fwd: Compiling Zeek-3.1.x using devtoolset-7 to generate a binary package for use in CentOS-7 In-Reply-To: References: Message-ID: Hi, We have been using Zeek-3.0.x RPM packages for CentOS-7 which are compiled using spec file derived from zeek src package and they worked well. Now we are considering upgrading to Zeek-3.1.x but that requires newer GCC compilers. We tried to use devtoolset-7 on the compiling machine to generate packages. The packages were generated successfully but when we tried to run them on our CentOS-7 sensors, we had the following error # zeekctl status Error: running "zeek -v" failed with output: /opt/zeek/bin/zeek: symbol lookup error: /opt/zeek/bin/zeek: undefined symbol: _ZdlPvm The linked libraries are # ldd /opt/zeek/bin/zeek linux-vdso.so.1 => (0x00007ffe73b7c000) libbinpac.so.0 => not found libpcap.so.1 => /lib64/libpcap.so.1 (0x00007feab99db000) libssl.so.10 => /lib64/libssl.so.10 (0x00007feab9769000) libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007feab9306000) libresolv.so.2 => /lib64/libresolv.so.2 (0x00007feab90ed000) libz.so.1 => /lib64/libz.so.1 (0x00007feab8ed7000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007feab8bee000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007feab89d2000) libdl.so.2 => /lib64/libdl.so.2 (0x00007feab87ce000) libstdc++.so.6 => /lib64/libstdc++.so.6 (0x00007feab84c6000) libm.so.6 => /lib64/libm.so.6 (0x00007feab81c4000) libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007feab7fae000) libc.so.6 => /lib64/libc.so.6 (0x00007feab7be0000) /lib64/ld-linux-x86-64.so.2 (0x00007feab9c1c000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007feab7993000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007feab778f000) libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007feab755c000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007feab734c000) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007feab7148000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007feab6f21000) libpcre.so.1 => /lib64/libpcre.so.1 (0x00007feab6cbf000) How do we get Zeek-3.1.x to run from RPM packages on CentOS-7? I already tried installing devtoolset-7 on the sensor but that didn't work. Any help will be appreciated. Regards, Dheeraj -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.icsi.berkeley.edu/pipermail/zeek-dev/attachments/20200520/a94156fb/attachment.html From johanna at icir.org Wed May 20 06:57:33 2020 From: johanna at icir.org (Johanna Amann) Date: Wed, 20 May 2020 06:57:33 -0700 Subject: [Zeek-Dev] Compiling Zeek-3.1.x using devtoolset-7 to generate a binary package for use in CentOS-7 In-Reply-To: References: Message-ID: <11D314A0-8830-42AB-80E9-6556C0F0AE29@icir.org> Hi, I have no clue why your specific error happens - a few bugs on the Internet indicate some OS/compiler incompatibilities. That being said - my suggestion is to try using devtoolset-6. The compilers in it are still new enough to compile Zeek 3.1, we use it for the packages that we distribute - and it seems to work. Johanna On 20 May 2020, at 0:17, Dheeraj Gupta wrote: > Hi, > > We have been using Zeek-3.0.x RPM packages for CentOS-7 which are > compiled > using spec file derived from zeek src package and they worked well. > > Now we are considering upgrading to Zeek-3.1.x but that requires newer > GCC > compilers. We tried to use devtoolset-7 on the compiling machine to > generate packages. The packages were generated successfully but when > we > tried to run them on our CentOS-7 sensors, we had the following error > > # zeekctl status > Error: running "zeek -v" failed with output: > /opt/zeek/bin/zeek: symbol lookup error: /opt/zeek/bin/zeek: undefined > symbol: _ZdlPvm > > The linked libraries are > > # ldd /opt/zeek/bin/zeek > linux-vdso.so.1 => (0x00007ffe73b7c000) > libbinpac.so.0 => not found > libpcap.so.1 => /lib64/libpcap.so.1 (0x00007feab99db000) > libssl.so.10 => /lib64/libssl.so.10 (0x00007feab9769000) > libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007feab9306000) > libresolv.so.2 => /lib64/libresolv.so.2 (0x00007feab90ed000) > libz.so.1 => /lib64/libz.so.1 (0x00007feab8ed7000) > libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007feab8bee000) > libpthread.so.0 => /lib64/libpthread.so.0 (0x00007feab89d2000) > libdl.so.2 => /lib64/libdl.so.2 (0x00007feab87ce000) > libstdc++.so.6 => /lib64/libstdc++.so.6 (0x00007feab84c6000) > libm.so.6 => /lib64/libm.so.6 (0x00007feab81c4000) > libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007feab7fae000) > libc.so.6 => /lib64/libc.so.6 (0x00007feab7be0000) > /lib64/ld-linux-x86-64.so.2 (0x00007feab9c1c000) > libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007feab7993000) > libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007feab778f000) > libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007feab755c000) > libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007feab734c000) > libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007feab7148000) > libselinux.so.1 => /lib64/libselinux.so.1 (0x00007feab6f21000) > libpcre.so.1 => /lib64/libpcre.so.1 (0x00007feab6cbf000) > > How do we get Zeek-3.1.x to run from RPM packages on CentOS-7? I > already > tried installing devtoolset-7 on the sensor but that didn't work. Any > help > will be appreciated. > > > Regards, > Dheeraj > _______________________________________________ > Zeek-Dev mailing list > Zeek-Dev at zeek.org > http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek-dev From dheeraj.gupta4 at gmail.com Mon May 25 23:18:50 2020 From: dheeraj.gupta4 at gmail.com (Dheeraj Gupta) Date: Tue, 26 May 2020 11:48:50 +0530 Subject: [Zeek-Dev] Compiling Zeek-3.1.x using devtoolset-7 to generate a binary package for use in CentOS-7 In-Reply-To: <11D314A0-8830-42AB-80E9-6556C0F0AE29@icir.org> References: <11D314A0-8830-42AB-80E9-6556C0F0AE29@icir.org> Message-ID: Hi, Thanks for your reply. As it turns out, I had some packaging issue so that all packages were not updated. After deploying new packages, the libbinpac.so of old 3.0.x line was still in use and that led to a conflict as it was compiled with GCC-4.8 Reinstalling all the packages led to new libbinpac.so being picked up and the issue disappeared. Zeek-3.1.1 compiled with devtoolset-7 is functioning on CentOS-7. Thanks again, Dheeraj On Wed, May 20, 2020 at 7:27 PM Johanna Amann wrote: > Hi, > > I have no clue why your specific error happens - a few bugs on the > Internet indicate some OS/compiler incompatibilities. > > That being said - my suggestion is to try using devtoolset-6. The > compilers in it are still new enough to compile Zeek 3.1, we use it for > the packages that we distribute - and it seems to work. > > Johanna > > On 20 May 2020, at 0:17, Dheeraj Gupta wrote: > > > Hi, > > > > We have been using Zeek-3.0.x RPM packages for CentOS-7 which are > > compiled > > using spec file derived from zeek src package and they worked well. > > > > Now we are considering upgrading to Zeek-3.1.x but that requires newer > > GCC > > compilers. We tried to use devtoolset-7 on the compiling machine to > > generate packages. The packages were generated successfully but when > > we > > tried to run them on our CentOS-7 sensors, we had the following error > > > > # zeekctl status > > Error: running "zeek -v" failed with output: > > /opt/zeek/bin/zeek: symbol lookup error: /opt/zeek/bin/zeek: undefined > > symbol: _ZdlPvm > > > > The linked libraries are > > > > # ldd /opt/zeek/bin/zeek > > linux-vdso.so.1 => (0x00007ffe73b7c000) > > libbinpac.so.0 => not found > > libpcap.so.1 => /lib64/libpcap.so.1 (0x00007feab99db000) > > libssl.so.10 => /lib64/libssl.so.10 (0x00007feab9769000) > > libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007feab9306000) > > libresolv.so.2 => /lib64/libresolv.so.2 (0x00007feab90ed000) > > libz.so.1 => /lib64/libz.so.1 (0x00007feab8ed7000) > > libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007feab8bee000) > > libpthread.so.0 => /lib64/libpthread.so.0 (0x00007feab89d2000) > > libdl.so.2 => /lib64/libdl.so.2 (0x00007feab87ce000) > > libstdc++.so.6 => /lib64/libstdc++.so.6 (0x00007feab84c6000) > > libm.so.6 => /lib64/libm.so.6 (0x00007feab81c4000) > > libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007feab7fae000) > > libc.so.6 => /lib64/libc.so.6 (0x00007feab7be0000) > > /lib64/ld-linux-x86-64.so.2 (0x00007feab9c1c000) > > libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007feab7993000) > > libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007feab778f000) > > libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007feab755c000) > > libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007feab734c000) > > libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007feab7148000) > > libselinux.so.1 => /lib64/libselinux.so.1 (0x00007feab6f21000) > > libpcre.so.1 => /lib64/libpcre.so.1 (0x00007feab6cbf000) > > > > How do we get Zeek-3.1.x to run from RPM packages on CentOS-7? I > > already > > tried installing devtoolset-7 on the sensor but that didn't work. Any > > help > > will be appreciated. > > > > > > Regards, > > Dheeraj > > _______________________________________________ > > Zeek-Dev mailing list > > Zeek-Dev at zeek.org > > http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek-dev > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.icsi.berkeley.edu/pipermail/zeek-dev/attachments/20200526/3c18fa29/attachment.html