Re: How to get dynamicdetection working

[Joel Esler <jesler () sourcefire com>]

http://vrt-sourcefire.blogspot.com/2009/01/using-vrt-certified-shared-object-rules.html
Joel

On Tue, Apr 28, 2009 at 7:47 PM, Russell Fulton <r.fulton () auckland ac nz>wrote:

> I have just worked through compiling the rules on another machine with
> a brand new copy of 2.8.4.1 and still get it.
>
> Apr 29 11:33:38 monitor-dmzo snort: FATAL ERROR: Dynamic detection
> lib /usr/local/lib/snort_dynamicrules/lib_sfdynamic_example_rule.so
> 1.0 isn't compatible wi
> th the current dynamic engine library /usr/local/lib/
> snort_dynamicengine/libsf_engine.so 1.10. The dynamic detection lib is
> compiled with an older version of the dynamic engine.
>
> After some stuffing around I did a rm lib_sfdynamic_example_rule.so*
> and everything burst into life.
>
> It would appear that when you install snort it installs these bad
> libraries :(
>
> Russell
>
>
>
>
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations
> Conference from O'Reilly Media. Velocity features a full day of
> expert-led, hands-on workshops and two days of sessions from industry
> leaders in dedicated Performance & Operations tracks. Use code vel09scf
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-- 
joel esler | Sourcefire | gtalk: jesler () sourcefire com | 302-223-5974 |
http://twitter.com/joelesler

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users