Re: ERROR: unknown logger alert_ex

[Y M <snort () outlook com>]

From: rucombs () cisco com
To: snort () outlook com; snort-devel () lists sourceforge net
Subject: RE: [Snort-devel] ERROR: unknown logger alert_ex
Date: Tue, 16 Dec 2014 19:44:55 +0000











From: Y M [snort () outlook com]

Sent: Tuesday, December 16, 2014 2:33 PM

To: snort-devel () lists sourceforge net

Subject: [Snort-devel] ERROR: unknown logger alert_ex






While trying the Snort++ Extras/loggers/alert_ex, I receive the below error:



dev@snortalpha:/usr/local/snort/etc$ sudo /usr/local/snort/bin/snort -c /usr/local/snort/etc/snort.lua -R 
/usr/local/snort/etc/sample.rules --daq pcap --pcap-dir=/tmp/pcaps --pcap-show
 --script-path /usr/local/lib/snort_extra -A alert_ex



* This one should be using --plugin-path in stead of --script-path.  I'll update the documentation to make that more 
clear.  Thanks.
-- Russ, now you have mentioned it, this is totally my mistake; the documentation is correct, the command "I" typed is 
wrong. Please ignore this.



...

Finished /usr/local/snort/etc/snort.lua.
ERROR: unknown logger alert_ex

...



Verifying the logger plugins exit:




dev@snortalpha:/usr/local/snort/etc$ ls -l /usr/local/lib/snort_extra/loggers/
total 40
-rw-r--r-- 1 root root  1645 Oct  5 05:30 alert.lua
-rw-r--r-- 1 root root 33410 Dec 16 12:28 libalert_ex.so




Please note that lualert works just fine.



Thanks
Yaser



------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!