[Snort-users] Snort 2.6.1 Beta 2 Question (snort_dynamicrule/)

Eric Hines eric.hines at ...8860...
Mon Oct 30 09:55:19 EST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

Has anyone here moved from Snort 2.6.0.x to Snort 2.6.1 yet? By default,
the following dynamic directories are created in /usr/local/lib:

/usr/local/lib/snort_dynamicengine
/usr/local/lib/snort_dynamicpreprocessor

However, when enabling all of the options in the new DNS Preprocessor it
causes Snort to fail with the error:

Rule application order:
- ->activation->dynamic->pass->drop->sdrop->reject->alert->log
Log directory =
/usr/local/appliedwatch/agent/data/agent.RyupiI/var/snort/log
Loading dynamic engine
/usr/local/lib/snort_dynamicengine/libsf_engine.so... done
Loading all dynamic detection libs from /usr/local/lib/snort_dynamicrule/...
Warning: Directory /usr/local/lib/snort_dynamicrule/ does not exist!
  Finished Loading all dynamic detection libs from
/usr/local/lib/snort_dynamicrule/
Loading dynamic detection library
/usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so... ERROR:
Failed to load
/usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so:
/usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so: cannot open
shared object file: No such file or directory
Fatal Error, Quitting..



The odd thing is that the /usr/local/lib/snort_dynamicrule directory is
not created during the Snort installation. Fine if the directory must be
created manually, but where do I get the libdynamicexamplerule.so file from?




- --

Best Regards,

Eric Hines, GCIA, CISSP
CEO, President
Applied Watch Technologies, LLC
1095 Pingree Road
Suite 221
Crystal Lake, IL 60014
Toll Free: (877) 262-7593
Fax: (847) 854-5106
Cell: (847) 456-6785
Web: www.appliedwatch.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFRhJX1va6QYTV0EMRAgOVAJ91yoieimGHYu9funN5xbUfKMEmnACfW7zV
IAUKwieY7O+SFvumgLETqbY=
=QjFj
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list