[Snort-users] Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL

Chan, Wilson wchan at ...14702...
Wed Feb 17 22:30:04 EST 2010


Just updated one of my CentOS boxes running snort-2.8.5.1.RH5.i386.rpm &
snort-mysql-2.8.5.1.RH5.i386.rpm to the latest v2.8.5.3 and now the
sensor won't run. It seems to be missing some files in the
dynamicpreprocessor. Any ideas?

 

[root at ...14777... snort]# snort -c snort.conf

Running in IDS mode

 

        --== Initializing Snort ==--

Initializing Output Plugins!

Initializing Preprocessors!

Initializing Plug-ins!

Parsing Rules file "snort.conf"

PortVar 'HTTP_PORTS' defined :  [ 80 ]

PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]

PortVar 'ORACLE_PORTS' defined :  [ 1521 ]

PortVar 'FTP_PORTS' defined :  [ 21 ]

ERROR: ../../src/parser.c(5050) Could not stat dynamic module path
"/usr/lib/snort-2.8.5_dynamicpreprocessor/": No such file or directory.

Fatal Error, Quitting..

 

[root at ...14777... snort]# cd /usr/lib/snort-2.8.5.3_dynamicpreprocessor/

[root at ...14777... snort-2.8.5.3_dynamicpreprocessor]# ls

libsf_dce2_preproc.so      libsf_dns_preproc.so
libsf_smtp_preproc.so    libsf_ssl_preproc.so

libsf_dce2_preproc.so.0    libsf_dns_preproc.so.0
libsf_smtp_preproc.so.0  libsf_ssl_preproc.so.0

libsf_dcerpc_preproc.so    libsf_ftptelnet_preproc.so
libsf_ssh_preproc.so

libsf_dcerpc_preproc.so.0  libsf_ftptelnet_preproc.so.0
libsf_ssh_preproc.so.0

 

 

Thanks!

 

Wilson 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100217/6e6c4243/attachment.html>


More information about the Snort-users mailing list