[Snort-users] Pulledpork and Snort warnings

Andrew Shagayev drewshg at ...11827...
Sat Mar 21 22:57:41 EDT 2015


*Hi! *

*running pulledpork:*sudo pulledpork.pl -vv -w -c
/usr/local/etc/pulledpork/pulledpork.conf

*got this:*
 ....
    Reading rules...
Generating Stub Rules....
    Generating shared object stubs via:/usr/local/bin/snort -c
/usr/local/etc/snort/snort.conf
--dump-dynamic-rules=/tmp/tha_rules/so_rules/
    An error occurred: WARNING: No dynamic libraries found in directory
/usr/local/lib/snort_dynamicrules.

    An error occurred: WARNING: ip4 normalizations disabled because not
inline.

    An error occurred: WARNING: tcp normalizations disabled because not
inline.

    An error occurred: WARNING: icmp4 normalizations disabled because not
inline.

    An error occurred: WARNING: ip6 normalizations disabled because not
inline.

    An error occurred: WARNING: icmp6 normalizations disabled because not
inline.

...

Done
Please review /var/log/sid_changes.log for additional details
Fly Piggy Fly!


*When running snort:*sudo /usr/local/bin/snort -vde -i en0 -c
/usr/local/etc/snort/snort.conf

*Getting:*
...

Loading all dynamic detection libs from /usr/local/lib/snort_dynamicrules...
WARNING: No dynamic libraries found in directory
/usr/local/lib/snort_dynamicrules.
  Finished Loading all dynamic detection libs from
/usr/local/lib/snort_dynamicrules
Loading all dynamic preprocessor libs from
/usr/local/lib/snort_dynamicpreprocessor/...
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so...
done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done
  Loading dynamic preprocessor library
/usr/local/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... done
  Finished Loading all dynamic preprocessor libs from
/usr/local/lib/snort_dynamicpreprocessor/
Log directory = /var/log/snort
WARNING: ip4 normalizations disabled because not inline.
WARNING: tcp normalizations disabled because not inline.
WARNING: icmp4 normalizations disabled because not inline.
WARNING: ip6 normalizations disabled because not inline.
WARNING: icmp6 normalizations disabled because not inline.
...


*Any ideas what does it mean and how to solve it?*
*Thank you*
-- 
A.S.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150321/5a44f221/attachment.html>


More information about the Snort-users mailing list