Re: Unable to create stub so rules files

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello again all

I should have added, if you comment out 
the 'include' lines for your SO rules, does

snort -i ethX -c /location/of/snort.conf -T 

complete OK other than that?

- From your error report it looks to be failing after the GTP
processor but before the bit at which it should read the dynamic engine
and then the .so files:

Loading dynamic engine /usr/local/lib/snort_dynamicengine/libsf_engine.so... done
Loading all dynamic detection libs from /usr/local/lib/snort_dynamicrules...

With the SO rules not included you should be seeing the above.

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQtNIWAAoJELhVoVpEMS6Rww0H/i91K3szoRviqsqzV0mi0P8B
NstxnEe0SiIrqqbZUtifuvnpDLakkI8n0QfwGrFyZruKKnhEohRmD0eTSDYSVXUm
0OejCYa5NAp+NnT8aLW0QFTPlxnQY+wFYPmNWSNPSIDOd/koWEXP9Qrsw0QCVnQf
ueF4DvVNJZR44TxMfvhb+xjnxPh3eSUMNOAhGZJ95T7654t8EgNScsmRy5ac2Ul1
BM8fYjs9JNyu2NupbIv6TUkUVolePuHlZ6tims4goaL+JoqaJFW8XRbsPfXNy757
JGzHqUUT9ImBSLn6t0izgu/2vndiUQEioC370UIwhd+6OFMA1lgDZvtRmGfOJ5Y=
=ToUd
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!