[Snort-users] Dynamic Preprocessor Errors

info+lucretia.ca info at ...2282...
Mon Jan 29 08:20:50 EST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello.

I'm trying to build 2.7.0.beta1 on Ubuntu 6.06.  So far things are working
well, except when I attempt to turn on the dynamic preprocessors.

I encountered an ID error when I simply uncommented them so I added some
text to make them look like the command line counterparts.  I'm not certain
whether they work from the command line, as I'm not interested in starting
them this way.

Starting snort with 'sudo' using the one and only parameter:  '-c
/etc/snort/snort.conf' I get the following output:

  ERROR: /etc/snort/snort.conf(539): Bad rule in rules file

This line contains:

  dynamic-preprocessor-lib
/usr/local/lib/snort_dynamicpreprocessor/libsf_ftptelnet_preproc.so

I get this error with any dynamic preprocessor enabled in snort.conf.

I've reviewed  the documentation and could find nothing indicating the
correct format for the 'dynamic-*' options for snort.conf (the command line
is well documented...) and I reviewed the list and forums with no luck on a
solution.

Cheers,


James Friesen, CIO
Lucretia Enterprises
Our World Is Here
info at lucretia dot ca
http://lucretia.ca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)

iD8DBQFFvfR2RMg8qN6NZpARAorKAKCEySnlR4ZQk7aKHLlLyqljS5JmZQCfUS/I
bXsz2BBrLFmK+fkW/JfWbdE=
=FNqz
-----END PGP SIGNATURE-----






More information about the Snort-users mailing list