[Snort-users] Errors after upgrade to 2.9.4.1

waldo kitty wkitty42 at ...14940...
Wed Mar 13 12:57:45 EDT 2013


On 3/13/2013 08:51, Alexander Grüner wrote:
> Mar 13 14:27:36 computer snort[3758]: FATAL ERROR: The dynamic detection
> library "/usr/local/snort/lib/snort_dynamicrules/p2p.so" version 1.0
> compiled with dynamic engine library version 1.16 isn't compatible with
> the current dynamic engine library
> "/usr/local/snort/lib/snort_dynamicengine/libsf_engine.so" version 1.17.

this error plainly states the problem and infers the solution... you have to 
update those SO files...

[...]

> I do not know if this corresponds to my oinkmaster issue. I am not able
> to download snapshot 2941 but 2940 works.
>
> Does not work:
> #url =
> http://www.snort.org/pub-bin/oinkmaster.cgi/***************/snortrules-snapshot-2941.tar.gz
>
> Works:
> url =
> http://www.snort.org/pub-bin/oinkmaster.cgi/************/snortrules-snapshot-2940.tar.gz

you are probably trying to get a rules set that is not yet available to you... 
do you have a subscription or are you registered?

[...]

> http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-2941.tar.gzResolving
> proxy.domain.de (proxy.doamin.de)... 192.168.101.11
> Connecting to proxy.domain.de (proxy.domain.de)|192.168.101.11|:3128...
> connected.
> Proxy request sent, awaiting response... 403 Forbidden
> 2013-03-13 14:05:00 ERROR 403: Forbidden.

yeah... either you are running into the 15 minute time limit for requests or you 
are trying to access a rules set that is not available to you yet...





More information about the Snort-users mailing list