Fwd: cant start snot

[Leonardo Pezente <lmpezente () gmail com>]

---------- Forwarded message ----------
From: Leonardo Pezente <lmpezente () gmail com>
Date: 2012/12/5
Subject: Re: [Snort-users] cant start snot
To: Shanavas kt <shandroid12 () gmail com>


ops i didnt post the line you should comment. is the line respective to the
dynamic preprocessor.


2012/12/5 Leonardo Pezente <lmpezente () gmail com>

> well, for what i can see, this problem is going on because this dinymic
> preprocessor not even exist. What is the version of snort are you using? If
> it is the 2.9.4, maybe is some thing new that isnt implement, or might be
> some kind of bug.
> IF you want to test, just comment the line on snort.conf and make a test
> if its goning to work.
>
> 2012/12/5 Shanavas kt <shandroid12 () gmail com>
>
> > Hi all,
> > Kindly help me, I stuck in my installation.
> >
> > snortadmin@snortdemo:/home/sno$ sudo /usr/local/snort/bin/snort -u snort
> > -g snort -c /usr/local/snort/etc/snort.conf -i eth1
> > Running in IDS mode
> >
> >         --== Initializing Snort ==--
> > Initializing Output Plugins!
> > Initializing Preprocessors!
> > Initializing Plug-ins!
> > Parsing Rules file "/usr/local/snort/etc/snort.conf"
> > PortVar 'HTTP_PORTS' defined :  [ 80:81 311 383 591 593 901 1220 1414
> > 1741 1830 2301 2381 2809 3128 3702 4343 4848 5250 7001 7145 7510 7777 7779
> > 8000 8008 8014 8028 8080 8088 8090 8118 8123 8180:8181 8243 8280 8300 8800
> > 8888 8899 9000 9060 9080 9090:9091 9443 9999 11371 50002 55555 ]
> > PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]
> > PortVar 'ORACLE_PORTS' defined :  [ 1024:65535 ]
> > PortVar 'SSH_PORTS' defined :  [ 22 ]
> > PortVar 'FTP_PORTS' defined :  [ 21 2100 3535 ]
> > PortVar 'SIP_PORTS' defined :  [ 5060:5061 5600 ]
> > PortVar 'FILE_DATA_PORTS' defined :  [ 80:81 110 143 311 383 591 593 901
> > 1220 1414 1741 1830 2301 2381 2809 3128 3702 4343 4848 5250 7001 7145 7510
> > 7777 7779 8000 8008 8014 8028 8080 8088 8090 8118 8123 8180:8181 8243 8280
> > 8300 8800 8888 8899 9000 9060 9080 9090:9091 9443 9999 11371 50002 55555 ]
> > PortVar 'GTP_PORTS' defined :  [ 2123 2152 3386 ]
> > Detection:
> >    Search-Method = AC-Full-Q
> >     Split Any/Any group = enabled
> >     Search-Method-Optimizations = enabled
> >     Maximum pattern length = 20
> > Tagged Packet Limit: 256
> > Loading dynamic engine
> > /usr/local/snort/lib/snort_dynamicengine/libsf_engine.so... done
> > Loading all dynamic detection libs from
> > /usr/local/snort/lib/snort_dynamicrules...
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/nntp.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/p2p.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/icmp.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/smtp.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/web-client.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/web-activex.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/chat.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/multimedia.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/web-misc.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/dos.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/snmp.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/misc.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/imap.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/specific-threats.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/netbios.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/exploit.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/bad-traffic.so... done
> >   Loading dynamic detection library
> > /usr/local/snort/lib/snort_dynamicrules/web-iis.so... done
> >   Finished Loading all dynamic detection libs from
> > /usr/local/snort/lib/snort_dynamicrules
> > Loading all dynamic preprocessor libs from
> > /usr/local/snort/lib/snort_dynamicpreprocessor/...
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so...
> > done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so...
> > done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so...
> > done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so...
> > done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done
> >   Loading dynamic preprocessor library
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so...
> > ERROR: Failed to load
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so:
> > /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so:
> > cannot open shared object file: No such file or directory
> > Fatal Error, Quitting..
> > snortadmin@snortdemo:/home/sno$
> >
> > it is the error, please help.
> >
> > Thanks in advance.
> >
> >
> >
> >
> > ------------------------------------------------------------------------------
> > LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> > Remotely access PCs and mobile devices and provide instant support
> > Improve your efficiency, and focus on delivering more value-add services
> > Discover what IT Professionals Know. Rescue delivers
> > http://p.sf.net/sfu/logmein_12329d2d
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!