[Snort-users] cant start snot

Leonardo Pezente lmpezente at ...11827...
Thu Dec 6 12:02:45 EST 2012


look, i dont have this file on my preprocessor directory, and i use the
same version of snort that u are using.
try to do what i have told to you.

and please, answer in that mail list, not direct to me.

2012/12/5 Leonardo Pezente <lmpezente at ...11827...>

>
>
> ---------- Forwarded message ----------
> From: Leonardo Pezente <lmpezente at ...11827...>
> Date: 2012/12/5
> Subject: Re: [Snort-users] cant start snot
> To: Shanavas kt <shandroid12 at ...11827...>
>
>
> ops i didnt post the line you should comment. is the line respective to
> the dynamic preprocessor.
>
>
> 2012/12/5 Leonardo Pezente <lmpezente at ...11827...>
>
>> well, for what i can see, this problem is going on because this dinymic
>> preprocessor not even exist. What is the version of snort are you using? If
>> it is the 2.9.4, maybe is some thing new that isnt implement, or might be
>> some kind of bug.
>> IF you want to test, just comment the line on snort.conf and make a test
>> if its goning to work.
>>
>> 2012/12/5 Shanavas kt <shandroid12 at ...11827...>
>>
>>> Hi all,
>>> Kindly help me, I stuck in my installation.
>>>
>>> snortadmin at ...15996...:/home/sno$ sudo /usr/local/snort/bin/snort -u
>>> snort -g snort -c /usr/local/snort/etc/snort.conf -i eth1
>>> Running in IDS mode
>>>
>>>         --== Initializing Snort ==--
>>> Initializing Output Plugins!
>>> Initializing Preprocessors!
>>> Initializing Plug-ins!
>>> Parsing Rules file "/usr/local/snort/etc/snort.conf"
>>> PortVar 'HTTP_PORTS' defined :  [ 80:81 311 383 591 593 901 1220 1414
>>> 1741 1830 2301 2381 2809 3128 3702 4343 4848 5250 7001 7145 7510 7777 7779
>>> 8000 8008 8014 8028 8080 8088 8090 8118 8123 8180:8181 8243 8280 8300 8800
>>> 8888 8899 9000 9060 9080 9090:9091 9443 9999 11371 50002 55555 ]
>>> PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]
>>> PortVar 'ORACLE_PORTS' defined :  [ 1024:65535 ]
>>> PortVar 'SSH_PORTS' defined :  [ 22 ]
>>> PortVar 'FTP_PORTS' defined :  [ 21 2100 3535 ]
>>> PortVar 'SIP_PORTS' defined :  [ 5060:5061 5600 ]
>>> PortVar 'FILE_DATA_PORTS' defined :  [ 80:81 110 143 311 383 591 593 901
>>> 1220 1414 1741 1830 2301 2381 2809 3128 3702 4343 4848 5250 7001 7145 7510
>>> 7777 7779 8000 8008 8014 8028 8080 8088 8090 8118 8123 8180:8181 8243 8280
>>> 8300 8800 8888 8899 9000 9060 9080 9090:9091 9443 9999 11371 50002 55555 ]
>>> PortVar 'GTP_PORTS' defined :  [ 2123 2152 3386 ]
>>> Detection:
>>>    Search-Method = AC-Full-Q
>>>     Split Any/Any group = enabled
>>>     Search-Method-Optimizations = enabled
>>>     Maximum pattern length = 20
>>> Tagged Packet Limit: 256
>>> Loading dynamic engine
>>> /usr/local/snort/lib/snort_dynamicengine/libsf_engine.so... done
>>> Loading all dynamic detection libs from
>>> /usr/local/snort/lib/snort_dynamicrules...
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/nntp.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/p2p.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/icmp.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/smtp.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/web-client.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/web-activex.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/chat.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/multimedia.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/web-misc.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/dos.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/snmp.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/misc.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/imap.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/specific-threats.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/netbios.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/exploit.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/bad-traffic.so... done
>>>   Loading dynamic detection library
>>> /usr/local/snort/lib/snort_dynamicrules/web-iis.so... done
>>>   Finished Loading all dynamic detection libs from
>>> /usr/local/snort/lib/snort_dynamicrules
>>> Loading all dynamic preprocessor libs from
>>> /usr/local/snort/lib/snort_dynamicpreprocessor/...
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so...
>>> done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so...
>>> done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so...
>>> done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so...
>>> done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done
>>>   Loading dynamic preprocessor library
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so...
>>> ERROR: Failed to load
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so:
>>> /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so:
>>> cannot open shared object file: No such file or directory
>>> Fatal Error, Quitting..
>>> snortadmin at ...15996...:/home/sno$
>>>
>>> it is the error, please help.
>>>
>>> Thanks in advance.
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
>>> Remotely access PCs and mobile devices and provide instant support
>>> Improve your efficiency, and focus on delivering more value-add services
>>> Discover what IT Professionals Know. Rescue delivers
>>> http://p.sf.net/sfu/logmein_12329d2d
>>> _______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.sourceforge.net
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>> Snort-users list archive:
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest
>>> Snort news!
>>>
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20121206/86ffc6f8/attachment.html>


More information about the Snort-users mailing list