Re: Upgrade to 2.9.7.0 results in Pulledpork not generating stub rules

[James Lay <jlay () slave-tothe-box net>]

On 2014-11-11 13:43, Y M wrote:
> > To: snort-users () lists sourceforge net
> > Date: Tue, 11 Nov 2014 13:37:26 -0700
> > From: jlay () slave-tothe-box net
> > Subject: Re: [Snort-users] Upgrade to 2.9.7.0 results in Pulledpork
> not generating stub rules
> > On 2014-11-11 13:33, Joel Esler (jesler) wrote:
> > > Looks like you are trying to use 2962 rules with 2970 or
> something.
> > > --
> > > JOEL ESLER Sent from my iPhone
> > >
> > > On Nov 11, 2014, at 3:12 PM, James Lay <jlay () slave-tothe-box net
> > > [6]>
> > > wrote:
> > >
> > > > Topic says it:
> > > >
> > > > Generating Stub Rules....
> > > > An error occurred: WARNING: No dynamic libraries found in
> > > > directory /usr/local/lib/snort_dynamicrules.
> > > >
> > > > Indeed after clearing out snort_dynamicrules after:
> > > >
> > > > An error occurred: ERROR: The dynamic detection library
> > > > "/usr/local/lib/snort_dynamicrules/web-activex.so" version 1.0
> > > > compiled
> > > > with dynamic engine library version 2.1 isn't compatible with the
> > > > current dynamic engine library
> > > > "/usr/local/lib/snort_dynamicengine/libsf_engine.so" version 2.4.
> > > >
> > > > I'm using VRT ruleset...has something changes since 2.9.6.2?
> Thank
> > > > you.
> > > >
> > > > James
> >
> > Maybe I need to blow out the rules....my pp run shows:
> >
> > Checking latest MD5 for snortrules-snapshot-2970.tar.gz....
> > Rules tarball download of snortrules-snapshot-2970.tar.gz....
> >
> > So not sure at this point...I'll try nuking the rules..thanks for
> > looking Joel.
> >
> > James
>
> Try manually deleting the old .so rules and then copy the new ones.
> Thats what I did on the dev box and it was a smooth upgrade.
>
> YM

Thanks YM..can you refresh my memory on how to create the so rules 
manually?  Been using PP too long I guess :)  Thanks again.

James

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!