Snort mailing list archives

dump dynamic rules problem.


From: Husnu Demir <hdemir () metu edu tr>
Date: Tue, 22 Dec 2009 13:37:13 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi People,


/usr/local/snort-2.8.5.1/bin/snort --dump-dynamic-rules /tmp/ command is not
working properly.

/usr/local/snort-2.8.5.1/bin/snort --dump-dynamic-rules /tmp/
Running in Rule Dump mode

        --== Initializing Snort ==--
Initializing Output Plugins!
Snort BPF option: /tmp
ERROR: snort.c(5049) Please specify the directory path for dumping the dynamic rules
Fatal Error, Quitting..



When I try

/usr/local/snort-2.8.5.1/bin/snort --dump-dynamic-rules=/tmp
Running in Rule Dump mode

        --== Initializing Snort ==--
Initializing Output Plugins!
Dumping dynamic rules...
  Finished dumping dynamic rules.
Snort exiting

ls /tmp
total 0



My snort config ..

snips..
..

dynamicdetection directory /usr/local/snort-2.8.5.1/lib/snort_dynamicrules/
..


uname -a
Linux kaf 2.6.26-2-xen-amd64 #1 SMP Thu Nov 5 04:27:12 UTC 2009 x86_64 GNU/Linux

Also I used precompiled Ubuntu 8.04 rules.so.


Thanks.

hdemir.

I used
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkswr2IACgkQHgR50XBBy+mEEgCgtbGca6ociLIqbzclG3yisr9c
1sIAoKSsx/ZXtutT1K/8NcZ8VPv2HHYX
=7TmL
-----END PGP SIGNATURE-----

Attachment: hdemir.vcf
Description:

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: