[Snort-users] Re: Rules for Snort 2.6 RC1

Justin Heath jheath at ...1935...
Wed May 10 14:44:49 EDT 2006


It's documented in the INSTALL, snort_manual and snort.conf.

On Friday 28 April 2006 12:59, Jason Monroe wrote:
> Hi All,
>
> Maybe I missed it, but perhaps if there was a README in the tarball, or
> an additional element that was added to the configure script that would
> call this option as needing a directory path as an argument it might
> make life a little easier.
>
> Best,
>
> JC
>
> :0>-----Original Message-----
> :0>From: snort-users-admin at lists.sourceforge.net [mailto:snort-users-
> :0>admin at lists.sourceforge.net] On Behalf Of Nigel Houghton
> :0>Sent: Friday, April 28, 2006 7:30 AM
> :0>To: Roberto Pereyra
> :0>Cc: snort-users at lists.sourceforge.net
> :0>Subject: [Snort-users] Re: Rules for Snort 2.6 RC1
> :0>
> :0>On  0, Roberto Pereyra <sysnetgchu at ...131...> wrote:
> :0>>
> :0>> Hi
> :0>>
> :0>> I compiled error but I have a error (I used the
>
> --enable-dynamicplugin
>
> :0>option).
> :0>> I using snortrules-snapshot-CURRENT.tar.gz rules.
> :0>>
> :0>> My output is:
> :0>>
> :0>> root at ...13794...:/home/admin/programas# snort -devyq -c
> :0>/etc/snort/snort.conf -l
> :0>> /var/log/snort/
> :0>> ERROR: /etc/snort/snort.conf(519) unknown preprocessor "ftp_telnet"
> :0>> Fatal Error, Quitting..
> :0>
> :0>You have to tell Snort where to find the dynamic preprocessors. There
>
> is
>
> :0>an extra option in the startup options that you need.
> :0>
> :0> --dynamic-preprocessor-lib-dir=/path/to/libs
> :0>
> :0>Or, you could include a line in your snort.conf to point to the libs
> :0>too.
> :0>
> :0> dynamicpreprocessor directory /path/to/libs
> :0>
> :0>There should be examples in the snort.conf.
> :0>
> :0>+--------------------------------------------------------------------
>
> +
>
> :0>     Nigel Houghton      Research Engineer       Sourcefire Inc.
> :0>                   Vulnerability Research Team
> :0>
> :0>         There is no theory of evolution, just a list
> :0>            of creatures Vin Diesel allows to live.
> :0>
> :0>
> :0>-------------------------------------------------------
> :0>Using Tomcat but need to do more? Need to support web services,
>
> security?
>
> :0>Get stuff done quickly with pre-integrated technology to make your
>
> job
>
> :0>easier
> :0>Download IBM WebSphere Application Server v.1.0.1 based on Apache
> :0>Geronimo
> :0>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121
>
> 642
>
> :0>_______________________________________________
> :0>Snort-users mailing list
> :0>Snort-users at lists.sourceforge.net
> :0>Go to this URL to change user options or unsubscribe:
> :0>https://lists.sourceforge.net/lists/listinfo/snort-users
> :0>Snort-users list archive:
> :0>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> __________________________________________________________________
>
>
> ArcSight 2006 User Conference--Register by May 5 and Save $500!
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier Download IBM WebSphere Application Server v.1.0.1 based on Apache
> Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list