Snort mailing list archives

Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL


From: "Chan, Wilson" <wchan () honolulu gov>
Date: Wed, 17 Feb 2010 17:30:04 -1000

Just updated one of my CentOS boxes running snort-2.8.5.1.RH5.i386.rpm &
snort-mysql-2.8.5.1.RH5.i386.rpm to the latest v2.8.5.3 and now the
sensor won't run. It seems to be missing some files in the
dynamicpreprocessor. Any ideas?

 

[root@snort-test- snort]# snort -c snort.conf

Running in IDS mode

 

        --== Initializing Snort ==--

Initializing Output Plugins!

Initializing Preprocessors!

Initializing Plug-ins!

Parsing Rules file "snort.conf"

PortVar 'HTTP_PORTS' defined :  [ 80 ]

PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]

PortVar 'ORACLE_PORTS' defined :  [ 1521 ]

PortVar 'FTP_PORTS' defined :  [ 21 ]

ERROR: ../../src/parser.c(5050) Could not stat dynamic module path
"/usr/lib/snort-2.8.5_dynamicpreprocessor/": No such file or directory.

Fatal Error, Quitting..

 

[root@snort-test- snort]# cd /usr/lib/snort-2.8.5.3_dynamicpreprocessor/

[root@snort-test- snort-2.8.5.3_dynamicpreprocessor]# ls

libsf_dce2_preproc.so      libsf_dns_preproc.so
libsf_smtp_preproc.so    libsf_ssl_preproc.so

libsf_dce2_preproc.so.0    libsf_dns_preproc.so.0
libsf_smtp_preproc.so.0  libsf_ssl_preproc.so.0

libsf_dcerpc_preproc.so    libsf_ftptelnet_preproc.so
libsf_ssh_preproc.so

libsf_dcerpc_preproc.so.0  libsf_ftptelnet_preproc.so.0
libsf_ssh_preproc.so.0

 

 

Thanks!

 

Wilson 

 

------------------------------------------------------------------------------
Download Intel&reg; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs 
proactively, and fine-tune applications for parallel performance. 
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: