I just finished building wireshark from the source with a pluggable dissector by following these steps. When I start wireshark from the command line I get the following message.
"Couldn't load module /usr/local/lib/wireshark/plugins/1.11.3/PluggableDissectorSourceFilename.so: /usr/local/lib/wireshark/plugins/1.11.3/PluggableDissectorSourceFilename.so: undefined symbol: ssl_print_data"
ssl_print-data is a function that is called several times in the pluggable dissector source code PlugableDissector.c. It is defined in this header file which I copied it and included it to my wireshark folder without any changes.
This error message does not prevent wireshark from running. A quiet similar question has been asked previously but I didn't get how they resolved it. Any suggestions or hints for the possible cause/s for this problem and/or solution/s to get rid off this message?
Update: I still have the same error even with 1.10.8 version. When I removed the sentences that use the ssl_print_data function from my dissector source code, Wireshark loaded without that error message.However, this is defiantly not a solution that I will go with because I do need to use that specific function. Any suggestions?
asked 16 Jun '14, 11:15
edited 25 Jun '14, 19:55
To limit the filling of the namespace with all kinds of function names, most of which are never linked against, only function names which carry a specific prefix get published as external interface for the module. When you want to make use of a function that does not have this prefix you should add it, then the build system will handle the actual publication. The prefix in question is WS_DLL_PUBLIC, so you should add that to the function in packet-ssl-utils.h. Note that this does not make your plugin compatible with released versions of Wireshark, since these do not carry the prefix for this function. Also the 1.11 series (or any odd numbered minor version number) signifies an unmaintained development snapshot, see Release Numbers. We are about to release 1.12, the new maintained branch. You might want to work off of that.
answered 16 Jun '14, 14:14
Please refer to this topic, I'm not sure but maybe it could help.
answered 19 Jun '14, 03:16