-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I should note, I don't think using all of the options in the DNS
Preprocessor is what caused this -- it may have been triggered earlier.
But that is when Snort failed to restart for me.
I suppose my question is, where do I get the libdynamicexamplerule.so
file from?
Best Regards,
Eric Hines, GCIA, CISSP
CEO, President
Applied Watch Technologies, LLC
1095 Pingree Road
Suite 221
Crystal Lake, IL 60014
Toll Free: (877) 262-7593
Fax: (847) 854-5106
Cell: (847) 456-6785
Web: www.appliedwatch.com
Eric Hines wrote:
> All,
>
> Has anyone here moved from Snort 2.6.0.x to Snort 2.6.1 yet? By default,
> the following dynamic directories are created in /usr/local/lib:
>
> /usr/local/lib/snort_dynamicengine
> /usr/local/lib/snort_dynamicpreprocessor
>
> However, when enabling all of the options in the new DNS Preprocessor it
> causes Snort to fail with the error:
>
> Rule application order:
> ->activation->dynamic->pass->drop->sdrop->reject->alert->log
> Log directory =
> /usr/local/appliedwatch/agent/data/agent.RyupiI/var/snort/log
> Loading dynamic engine
> /usr/local/lib/snort_dynamicengine/libsf_engine.so... done
> Loading all dynamic detection libs from /usr/local/lib/snort_dynamicrule/...
> Warning: Directory /usr/local/lib/snort_dynamicrule/ does not exist!
> Finished Loading all dynamic detection libs from
> /usr/local/lib/snort_dynamicrule/
> Loading dynamic detection library
> /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so... ERROR:
> Failed to load
> /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so:
> /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so: cannot open
> shared object file: No such file or directory
> Fatal Error, Quitting..
>
>
>
> The odd thing is that the /usr/local/lib/snort_dynamicrule directory is
> not created during the Snort installation. Fine if the directory must be
> created manually, but where do I get the libdynamicexamplerule.so file from?
>
>
>
- -------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFRkRm1va6QYTV0EMRAte+AJ9kjqT9x/i8lzExuKLK4MIOWPdXkACfSbBA
cg7w6WdeWlaU4jUI7MMPZOc=
=GNmd
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
|