[Snort-users] ERROR size 1240 != 864

Joel Esler (jesler) jesler at ...589...
Fri Dec 2 07:11:54 EST 2016

Close.  But in this case it's not the shared objects.   It's the preprocessors.  You have to remove the old preprocessors before you install a new version of Snort.

Sent from my iPhone

On Dec 2, 2016, at 5:17 AM, Y M <snort at ...15979...<mailto:snort at ...15979...>> wrote:

Make sure that Snort's shared objects match the intended version of Snort.

It looks like your are using shared objects not complied against the Snort version you are are running. Usually this happens during Snort upgrades when one forgets to copy the shared objects that ship with upgrade code of Snort. This also may happen when an older Snort version may have been installed through repo and then upgraded through source code compilation.

Either ways, make sure sure that shared objects in use the ones that come with the version of Snort you are running.


On Fri, Dec 2, 2016 at 1:07 PM +0300, "Gurram Vinay" <gurramvinayiiit at ...5119...827...<mailto:gurramvinayiiit at ...11827...>> wrote:

Hello everyone,

I am newbie to snort ,

I am having trouble in below error,

$ sudo snort -q -A console -i eth0 -c /etc/snort/snort.conf

ERROR size 1240 != 864
ERROR: Failed to initialize dynamic preprocessor: SF_REPUTATION version 1.1.1 (-2)
Fatal Error, Quitting..

Thanks & Best regards,

Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org<http://SlashDot.org>! http://sdm.link/slashdot
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20161202/76a10765/attachment.html>

More information about the Snort-users mailing list