Snort
[Top] [All Lists]

Re: [Snort-users] unknown dynamic preprocessor "ftp_telnet"

To: OlRoy OlRoy <olroy1212@yahoo.com>
Subject: Re: [Snort-users] unknown dynamic preprocessor "ftp_telnet"
From: Matthew Watchinski <mwatchinski@sourcefire.com>
Date: Sat, 27 Jan 2007 13:51:51 -0500
Cc: snort-users@lists.sourceforge.net
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <713560.541.qm@web57706.mail.re3.yahoo.com>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <713560.541.qm@web57706.mail.re3.yahoo.com>
Sender: snort-users-bounces@lists.sourceforge.net
User-agent: Thunderbird 1.5.0.9 (Macintosh/20061207)
It looks like "make install" didn't create the necessary sym links in
/usr/local/lib/snort_dynamicpreprocessor

Do the following and see if it fixes it.

cd /usr/local/lib/snort_dynamicpreprocessor

ln -s libsf_ftptelnet_preproc.so.0.0 libsf_ftptelnet_preproc.so
ln -s libsf_dcerpc_preproc.so.0.0 libsf_dcerpc_preproc.so
ln -s libsf_smtp_preproc.so.0.0 libsf_smtp_preproc.so
ln -s libsf_dns_preproc.so.0.0 libsf_dns_preproc.so
ln -s libsf_ssh_preproc.so.0.0 libsf_ssh_preproc.so

OlRoy OlRoy wrote:
> OS: OpenBSD 4.0
> Snort version: Snort-2.6.1.2
> Config: default snort.conf
> 
> When I tried installing Snort with
> ./configure --enable-dynamicplugin --prefix=/usr/local/stow/snort-2.6.1.2
> it seemed to work fine. However, I got the following error when trying to run 
> Snort in IDS mode.
> 
> Loading dynamic engine /usr/local/lib/snort_dynamicengine/libsf_engine.so... 
> done
> Loading all dynamic preprocessor libs from 
> /usr/local/lib/snort_dynamicpreprocessor/...
> Warning: No dynamic libraries found in directory 
> /usr/local/lib/snort_dynamicpreprocessor/!
> Finished Loading all dynamic preprocessor libs from 
> /usr/local/lib/snort_dynamicpreprocessor/
> /etc/snort/snort.conf(573) unknown dynamic preprocessor "ftp_telnet"
> /etc/snort/snort.conf(577) unknown dynamic preprocessor "ftp_telnet_protocol"
> /etc/snort/snort.conf(591) unknown dynamic preprocessor "ftp_telnet_protocol"
> /etc/snort/snort.conf(596) unknown dynamic preprocessor "ftp_telnet_protocol"
> /etc/snort/snort.conf(622) unknown dynamic preprocessor "smtp"
> /etc/snort/snort.conf(777) unknown dynamic preprocessor "dcerpc"
> /etc/snort/snort.conf(795) unknown dynamic preprocessor "dns"
> ERROR: Misconfigured dynamic preprocessor(s)
> Fatal Error, Quitting..
> 
> 
> # ls /usr/local/lib/snort_dynamicpreprocessor/
> libsf_dcerpc_preproc.a libsf_ftptelnet_preproc.so.0.0
> libsf_dcerpc_preproc.la libsf_smtp_preproc.a
> libsf_dcerpc_preproc.so.0.0 libsf_smtp_preproc.la
> libsf_dns_preproc.a libsf_smtp_preproc.so.0.0
> libsf_dns_preproc.la libsf_ssh_preproc.a
> libsf_dns_preproc.so.0.0 libsf_ssh_preproc.la
> libsf_ftptelnet_preproc.a libsf_ssh_preproc.so.0.0
> libsf_ftptelnet_preproc.la
> 
> Does anyone know how I can get this working?
>  
> ---------------------------------
> Bored stiff? Loosen up...
> Download and play hundreds of games for free on Yahoo! Games.
> 
> 
> ------------------------------------------------------------------------
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>