No problem.
Nope, it's just an example.
Also, if you don't have any dynamic rules enabled you don't need the dynamic engine turned on.
Cheers, Justin
On 10/30/06,
Eric Hines <eric.hines@appliedwatch.com> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Ahh thanks. So its commented out by default and at some point the comment was removed from my file.
So Sourcefire isn't going to create and distribute this example .SO file?
Best Regards,
Eric Hines, GCIA, CISSP CEO, President Applied Watch Technologies, LLC 1095 Pingree Road Suite 221 Crystal Lake, IL 60014 Toll Free: (877) 262-7593 Fax: (847) 854-5106
Cell: (847) 456-6785 Web: www.appliedwatch.com
Justin Heath wrote: > It looks like you are trying to load an example dynamic rule. This is > purely an example for those who want to create an example rule it is not
> meant to be loaded. > > On 10/30/06, * Eric Hines* <eric.hines@appliedwatch.com > <mailto:eric.hines@appliedwatch.com
>> wrote: > > All, > > Has anyone here moved from Snort 2.6.0.x to Snort 2.6.1 yet? By default, > the following dynamic directories are created in /usr/local/lib: > > /usr/local/lib/snort_dynamicengine
> /usr/local/lib/snort_dynamicpreprocessor > > However, when enabling all of the options in the new DNS Preprocessor it > causes Snort to fail with the error: > > Rule application order:
> ->activation->dynamic->pass->drop->sdrop->reject->alert->log > Log directory = > /usr/local/appliedwatch/agent/data/agent.RyupiI/var/snort/log > Loading dynamic engine
> /usr/local/lib/snort_dynamicengine/libsf_engine.so... done > Loading all dynamic detection libs from > /usr/local/lib/snort_dynamicrule/... > Warning: Directory /usr/local/lib/snort_dynamicrule/ does not exist!
> Finished Loading all dynamic detection libs from > /usr/local/lib/snort_dynamicrule/ > Loading dynamic detection library > /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so... ERROR:
> Failed to load > /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so: > /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.so: cannot open > shared object file: No such file or directory
> Fatal Error, Quitting.. > > > > The odd thing is that the /usr/local/lib/snort_dynamicrule directory is > not created during the Snort installation. Fine if the directory must be > created manually, but where do I get the
libdynamicexamplerule.so > file from? > > > >
- -------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services,
security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 <http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net <mailto:
Snort-users@lists.sourceforge.net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-----BEGIN PGP SIGNATURE----- Version: GnuPG
v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFRkS71va6QYTV0EMRAltQAJwI19sp0kt/NhE8xthjEYRNC85BiACgmMbk pExInptoRbWzgFnLdFWW4iM=
=oBNL -----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
|