Snort mailing list archives

Dynamic Preprocessor Errors


From: "info+lucretia.ca" <info () lucretia ca>
Date: Mon, 29 Jan 2007 06:20:50 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello.

I'm trying to build 2.7.0.beta1 on Ubuntu 6.06.  So far things are working
well, except when I attempt to turn on the dynamic preprocessors.

I encountered an ID error when I simply uncommented them so I added some
text to make them look like the command line counterparts.  I'm not certain
whether they work from the command line, as I'm not interested in starting
them this way.

Starting snort with 'sudo' using the one and only parameter:  '-c
/etc/snort/snort.conf' I get the following output:

  ERROR: /etc/snort/snort.conf(539): Bad rule in rules file

This line contains:

  dynamic-preprocessor-lib
/usr/local/lib/snort_dynamicpreprocessor/libsf_ftptelnet_preproc.so

I get this error with any dynamic preprocessor enabled in snort.conf.

I've reviewed  the documentation and could find nothing indicating the
correct format for the 'dynamic-*' options for snort.conf (the command line
is well documented...) and I reviewed the list and forums with no luck on a
solution.

Cheers,


James Friesen, CIO
Lucretia Enterprises
Our World Is Here
info at lucretia dot ca
http://lucretia.ca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)

iD8DBQFFvfR2RMg8qN6NZpARAorKAKCEySnlR4ZQk7aKHLlLyqljS5JmZQCfUS/I
bXsz2BBrLFmK+fkW/JfWbdE=
=FNqz
-----END PGP SIGNATURE-----



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: