[Snort-users] 32-bit dynamic rules libraries on 64-bit Linux (Ubuntu)

Mike Pilkington mpilking at ...11827...
Fri Nov 13 19:55:46 EST 2009


I've compiled Snort on 64-bit Ubuntu 8.04 Server.  The build
process went smoothly as far as I could tell.  But when I started
Snort, I get the following error:


PortVar 'DCERPC_BRIGHTSTORE' defined :  [ 6503:6504 ]
   Search-Method = AC-BNFA-Q
Tagged Packet Limit: 256
Loading dynamic engine
/usr/local/lib/snort_dynamicengine/libsf_engine.so... done
Loading dynamic detection library
/usr/local/lib/snort_dynamicrules/bad-traffic.so... ERROR: Failed to
load /usr/local/lib/snort_dynamicrules/bad-traffic.so:
/usr/local/lib/snort_dynamicrules/bad-traffic.so: wrong ELF class:
Fatal Error, Quitting..


I found a posting from 2007 regarding this issue and it seemed to be a
bug that was fixed in 2.7.0-6

Commenting out "dynamicengine
/usr/lib/snort_dynamicengine/libsf_engine.so", as suggested in the
posting, does not help.  However, if I comment out all the dynamic
rule libraries, Snort runs fine.  But of course I'd like to have the
dynamic rules available.

Any ideas how I this can be fixed?

Thanks for your time,

More information about the Snort-users mailing list