Snort mailing list archives
RE: Re: Rules for Snort 2.6 RC1
From: "Jason Monroe" <monroe () arcsight com>
Date: Fri, 28 Apr 2006 09:59:47 -0700
Hi All, Maybe I missed it, but perhaps if there was a README in the tarball, or an additional element that was added to the configure script that would call this option as needing a directory path as an argument it might make life a little easier. Best, JC :0>-----Original Message----- :0>From: snort-users-admin () lists sourceforge net [mailto:snort-users- :0>admin () lists sourceforge net] On Behalf Of Nigel Houghton :0>Sent: Friday, April 28, 2006 7:30 AM :0>To: Roberto Pereyra :0>Cc: snort-users () lists sourceforge net :0>Subject: [Snort-users] Re: Rules for Snort 2.6 RC1 :0> :0>On 0, Roberto Pereyra <sysnetgchu () yahoo com> wrote: :0>> :0>> Hi :0>> :0>> I compiled error but I have a error (I used the --enable-dynamicplugin :0>option). :0>> I using snortrules-snapshot-CURRENT.tar.gz rules. :0>> :0>> My output is: :0>> :0>> root@bridge:/home/admin/programas# snort -devyq -c :0>/etc/snort/snort.conf -l :0>> /var/log/snort/ :0>> ERROR: /etc/snort/snort.conf(519) unknown preprocessor "ftp_telnet" :0>> Fatal Error, Quitting.. :0> :0>You have to tell Snort where to find the dynamic preprocessors. There is :0>an extra option in the startup options that you need. :0> :0> --dynamic-preprocessor-lib-dir=/path/to/libs :0> :0>Or, you could include a line in your snort.conf to point to the libs :0>too. :0> :0> dynamicpreprocessor directory /path/to/libs :0> :0>There should be examples in the snort.conf. :0> :0>+-------------------------------------------------------------------- + :0> Nigel Houghton Research Engineer Sourcefire Inc. :0> Vulnerability Research Team :0> :0> There is no theory of evolution, just a list :0> of creatures Vin Diesel allows to live. :0> :0> :0>------------------------------------------------------- :0>Using Tomcat but need to do more? Need to support web services, security? :0>Get stuff done quickly with pre-integrated technology to make your job :0>easier :0>Download IBM WebSphere Application Server v.1.0.1 based on Apache :0>Geronimo :0>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121 642 :0>_______________________________________________ :0>Snort-users mailing list :0>Snort-users () lists sourceforge net :0>Go to this URL to change user options or unsubscribe: :0>https://lists.sourceforge.net/lists/listinfo/snort-users :0>Snort-users list archive: :0>http://www.geocrawler.com/redir-sf.php3?list=snort-users __________________________________________________________________ ArcSight 2006 User Conference--Register by May 5 and Save $500! ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rules for Snort 2.6 RC1 Roberto Pereyra (Apr 27)
- RE: Rules for Snort 2.6 RC1 Miner, Jonathan W (CSC) (US SSA) (Apr 27)
- RE: Rules for Snort 2.6 RC1 Frank Knobbe (Apr 27)
- RE: Rules for Snort 2.6 RC1 Miner, Jonathan W (CSC) (US SSA) (Apr 27)
- RE: Rules for Snort 2.6 RC1 Frank Knobbe (Apr 27)
- RE: Rules for Snort 2.6 RC1 Frank Knobbe (Apr 27)
- RE: Rules for Snort 2.6 RC1 Miner, Jonathan W (CSC) (US SSA) (Apr 27)
- Re: Rules for Snort 2.6 RC1 Nigel Houghton (Apr 27)
- Re: Re: Rules for Snort 2.6 RC1 Roberto Pereyra (Apr 27)
- Re: Re: Rules for Snort 2.6 RC1 Roberto Pereyra (Apr 28)
- Re: Rules for Snort 2.6 RC1 Nigel Houghton (Apr 28)
- <Possible follow-ups>
- RE: Re: Rules for Snort 2.6 RC1 Jason Monroe (Apr 28)
- Re: Rules for Snort 2.6 RC1 Nigel Houghton (Apr 28)
- Re: Re: Rules for Snort 2.6 RC1 Justin Heath (May 10)