[Snort-users] Snort Beta v2.6

Ron Jenkins rjenkins at ...12829...
Mon Mar 20 16:40:04 EST 2006


Is anyone else having these problems?

 

 

 

ERROR: /etc/snort/snort.conf(519) unknown preprocessor "ftp_telnet" 
Fatal Error, Quitting.. 

ERROR: /etc/snort/snort.conf(523) unknown preprocessor
"ftp_telnet_protocol" 
Fatal Error, Quitting.. 

ERROR: /etc/snort/snort.conf(571) unknown preprocessor "smtp" 
Fatal Error, Quitting.. 

Rule application order: ->activation->dynamic->pass->drop->alert->log 
Log directory = /var/log/snort 
Verifying Preprocessor Configurations! 
Warning: flowbits key 'trojan' is set but not ever checked. 
Warning: flowbits key 'dce.bind.veritas' is set but not ever checked. 
Warning: flowbits key 'dce.isystemactivator.bind.call.attempt' is set
but not ever checked. 
Warning: flowbits key 'http.jpeg' is checked but not ever set. 
Warning: flowbits key 'realplayer.playlist' is checked but not ever set.

Warning: flowbits key 'ms_sql_seen_dns' is checked but not ever set. 
Warning: flowbits key 'netbios.lsass.bind.attempt' is checked but not
ever set.

 

 

After  a short period of time snort exits with the following: 

Not Using PCAP_FRAMES

 

 

Also, the server drive becomes very busy.

 

Thanks...

 

Ron Jenkins (SnortCP, MCNE, CNE6, MCP, CCNA, CCEA)
Senior Architect
Data Integrity, LLC
"We Integrate People with Solutions"
1724 Dallas Drive
Suite 11
Baton Rouge, La 70806
Office. 225.927.8030
Fax. 225.927.8033
Cell225.931.1632

Email. rjenkins at ...12829...
Web. http://www.dibr.net

(Aanval Reseller and Technology Partner)

http://www.aanval.com/tour/dibr

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20060320/31b8713d/attachment.html>


More information about the Snort-users mailing list