[Snort-users] Could not stat dynamic module path "/usr/lib64/snort_dynamicrule"

Jefferson Diego Gomes Rosa jeffersondiego8 at ...11827...
Sun Dec 18 19:50:07 EST 2011


You can just comment all dinamicdetection entries at your snort.conf:
#dynamicdetection directory /usr/lib64/snort_dynamicrules

Em 17 de dezembro de 2011 23:08, Shane <
software.research.development at ...11827...> escreveu:

> I know this has been asked a million times, but I'm not finding what
> I'm supposed to do to /usr/lib64/snort_dynamicrules directory which is
> empty. I'm trying to get snort 2.9.0.5 started in IDS mode on gentoo
> and getting the following error.
>
> Any help much appreciated.
>
>
> --- this is from /var/log/messages
>
> Dec 17 18:05:13 wimpy snort[6643]: Found pid path directive
> (/var/run/snort)
> Dec 17 18:05:13 wimpy snort[6643]: Running in IDS mode
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]:         --== Initializing Snort ==--
> Dec 17 18:05:13 wimpy snort[6643]: Initializing Output Plugins!
> Dec 17 18:05:13 wimpy snort[6643]: Initializing Preprocessors!
> Dec 17 18:05:13 wimpy snort[6643]: Initializing Plug-ins!
> Dec 17 18:05:13 wimpy snort[6643]: Parsing Rules file
> "/etc/snort/snort.conf"
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'HTTP_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 80 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'SHELLCODE_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 0:79 81:65535 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'ORACLE_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 1521 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'FTP_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 21 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: FATAL ERROR: parser.c(5245) Could
> not stat dynamic module path "/usr/lib64/snort_dynamicrule": No such
> file or directory.
> Dec 17 18:05:13 wimpy /etc/init.d/snort[6634]: ERROR: snort failed to start
>
>
> ------------------------------------------------------------------------------
> Learn Windows Azure Live!  Tuesday, Dec 13, 2011
> Microsoft is holding a special Learn Windows Azure training event for
> developers. It will provide a great way to learn Windows Azure and what it
> provides. You can attend the event by watching it streamed LIVE online.
> Learn more at http://p.sf.net/sfu/ms-windowsazure
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>



-- 

   *Best Regards,*



Jefferson *“**Diede”* Diego

Network Administrator / Network Engineer
 *Nextel**:* 55*86*248729  *iDEN:*  +55-11-7763-9947*
Mobile: * +55-11-7598-6750

*Linux User:* 449363
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111218/7abfb23b/attachment.html>


More information about the Snort-users mailing list