[Snort-users] ERROR size 1240 != 864

Y M snort at ...15979...
Fri Dec 2 07:19:35 EST 2016


Aaah, this is the cost of reading without actually reading.

Thanks for the correction.
YM





On Fri, Dec 2, 2016 at 3:11 PM +0300, "Joel Esler (jesler)" <jesler at ...16731.....<mailto:jesler at ...589...>> wrote:

Close.  But in this case it's not the shared objects.   It's the preprocessors.  You have to remove the old preprocessors before you install a new version of Snort.

--
Sent from my iPhone

On Dec 2, 2016, at 5:17 AM, Y M <snort at ...15979...<mailto:snort at ...15979...>> wrote:

Make sure that Snort's shared objects match the intended version of Snort.

It looks like your are using shared objects not complied against the Snort version you are are running. Usually this happens during Snort upgrades when one forgets to copy the shared objects that ship with upgrade code of Snort. This also may happen when an older Snort version may have been installed through repo and then upgraded through source code compilation.

Either ways, make sure sure that shared objects in use the ones that come with the version of Snort you are running.

YM





On Fri, Dec 2, 2016 at 1:07 PM +0300, "Gurram Vinay" <gurramvinayiiit at ...5119...827...<mailto:gurramvinayiiit at ...11827...>> wrote:

Hello everyone,

I am newbie to snort ,

I am having trouble in below error,

$ sudo snort -q -A console -i eth0 -c /etc/snort/snort.conf

ERROR size 1240 != 864
ERROR: Failed to initialize dynamic preprocessor: SF_REPUTATION version 1.1.1 (-2)
Fatal Error, Quitting..





--
Thanks & Best regards,

VINAY GURRAM
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org<http://SlashDot.org>! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20161202/7d2d6bfb/attachment.html>


More information about the Snort-users mailing list