Snort mailing list archives
Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL
From: "Chan, Wilson" <wchan () honolulu gov>
Date: Wed, 17 Feb 2010 17:30:04 -1000
Just updated one of my CentOS boxes running snort-2.8.5.1.RH5.i386.rpm & snort-mysql-2.8.5.1.RH5.i386.rpm to the latest v2.8.5.3 and now the sensor won't run. It seems to be missing some files in the dynamicpreprocessor. Any ideas? [root@snort-test- snort]# snort -c snort.conf Running in IDS mode --== Initializing Snort ==-- Initializing Output Plugins! Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file "snort.conf" PortVar 'HTTP_PORTS' defined : [ 80 ] PortVar 'SHELLCODE_PORTS' defined : [ 0:79 81:65535 ] PortVar 'ORACLE_PORTS' defined : [ 1521 ] PortVar 'FTP_PORTS' defined : [ 21 ] ERROR: ../../src/parser.c(5050) Could not stat dynamic module path "/usr/lib/snort-2.8.5_dynamicpreprocessor/": No such file or directory. Fatal Error, Quitting.. [root@snort-test- snort]# cd /usr/lib/snort-2.8.5.3_dynamicpreprocessor/ [root@snort-test- snort-2.8.5.3_dynamicpreprocessor]# ls libsf_dce2_preproc.so libsf_dns_preproc.so libsf_smtp_preproc.so libsf_ssl_preproc.so libsf_dce2_preproc.so.0 libsf_dns_preproc.so.0 libsf_smtp_preproc.so.0 libsf_ssl_preproc.so.0 libsf_dcerpc_preproc.so libsf_ftptelnet_preproc.so libsf_ssh_preproc.so libsf_dcerpc_preproc.so.0 libsf_ftptelnet_preproc.so.0 libsf_ssh_preproc.so.0 Thanks! Wilson
------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL Chan, Wilson (Feb 17)
- Re: Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL Matt Olney (Feb 17)
- Re: Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL Chan, Wilson (Feb 18)
- Re: Update from v2.8.5.1 to v2.8.5.3 (rpm) = FAIL Matt Olney (Feb 17)