Skip to content

Suricata: plugins issue #3091

@abbasfadhil2033-cmd

Description

@abbasfadhil2033-cmd

I'v installed suricata 8.0.3 from the source and ndpi 4.14 and I setup every thing fine, when it comes to testing suricata it shows this error, I asked the ai it propose to me some solutions non of them worked.
the error message below:

sudo suricata -T -c /etc/suricata/suricata.yaml -v
Notice: suricata: This is Suricata version 8.0.3 RELEASE running in SYSTEM mode
Info: cpu: CPUs/cores online: 4
Info: suricata: Running suricata under test mode
Notice: plugin: Loading plugin /usr/lib/suricata/ndpi.so
Error: plugin: Suricata and plugin versions differ: plugin has 7fd2f55919f9 ((null)) vs Suricata 800 (plugin was built with 8.0.3)
Error: plugin: Plugin registration failed: /usr/lib/suricata/ndpi.so
Info: suricata: Setting engine mode to IDS mode by default
Info: exception-policy: master exception-policy set to: auto
Info: logopenfile: fast output device (regular) initialized: fast.log
Info: logopenfile: eve-log output device (regular) initialized: eve.json
Info: logopenfile: stats output device (regular) initialized: stats.log
^CInfo: detect: 2 rule files processed. 47704 rules successfully loaded, 0 rules failed, 0 rules skipped
Info: threshold-config: Threshold config parsed: 0 rule(s) found
Info: detect: 47707 signatures processed. 1268 are IP-only rules, 4449 are inspecting packet payload, 41753 inspect application layer, 110 are decoder event only
^CNotice: suricata: Configuration provided was successfully loaded. Exiting.

The AI also suggest to me to edit some things in this file:
"sudo nano ~/suricata-8.0.3/plugins/ndpi/ndpi.c "
some of the changes was in this part of the file:

const SCPlugin PluginRegistration = {
.name = "ndpi",
.author = "Luca Deri",
.license = "GPLv3",
.version = "SC_API_VERSION",
.suricata_version = "8.0.3",
.Init = NdpiInit,
};
I think the problem is about the .version = "SC_API_VERSION" field the AI asked me to change it a lot like (800, 1 and "SC_API_VERSION" and I end up losing the default configuration of this file,
pls help.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions