Re: Snort 2.9.1.0 on Gentoo; fatal startup error

[NA <dustypath () comcast net>]

On 9/30/11 5:26 AM, Nigel Houghton wrote:
> On Sep 29, 2011, at 9:05 PM, NA wrote:
>
> > Sep 29 17:58:27 snorthost  snort[8347]: FATAL ERROR: Failed to load
> > /usr/lib64/snort_dynamicrules/web-activex.so:
> > /usr/lib64/snort_dynamicrules/web-activex.so: ELF file OS ABI invalid
> This error means that the binary you have is not compatible with the operating system it is being used on.
>
> What OS are you using for Snort and which shared object rules are you using?
>
> --
> Nigel Houghton
> Head Mentalist
> SF VRT Department of Intelligence Excellence
> http://vrt-blog.snort.org/ && http://labs.snort.org/
I was able to get snort started by deleted the shared object rules and
replacing them with the Ubuntu-8.04 rules manually, they were different
even though only dated a day apart. I also could not get dynamic rules
working with PulledPork so I un-commented them in snort.conf.


> I still get this warning even though the rules have been deleted and regenerated via PulledPork...
 WARNING /etc/snort/rules/snort.rules(4972) The argument 'mime' to
'file_data' rule option is deprecated.

I plainly do not understand how to compile my own shared object rules
from source...

Thanks,
Bill

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2dcopy2
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!