Snort mailing list archives
Re: cant start snot
From: Leonardo Pezente <lmpezente () gmail com>
Date: Thu, 6 Dec 2012 15:02:45 -0200
look, i dont have this file on my preprocessor directory, and i use the same version of snort that u are using. try to do what i have told to you. and please, answer in that mail list, not direct to me. 2012/12/5 Leonardo Pezente <lmpezente () gmail com>
---------- Forwarded message ---------- From: Leonardo Pezente <lmpezente () gmail com> Date: 2012/12/5 Subject: Re: [Snort-users] cant start snot To: Shanavas kt <shandroid12 () gmail com> ops i didnt post the line you should comment. is the line respective to the dynamic preprocessor. 2012/12/5 Leonardo Pezente <lmpezente () gmail com>well, for what i can see, this problem is going on because this dinymic preprocessor not even exist. What is the version of snort are you using? If it is the 2.9.4, maybe is some thing new that isnt implement, or might be some kind of bug. IF you want to test, just comment the line on snort.conf and make a test if its goning to work. 2012/12/5 Shanavas kt <shandroid12 () gmail com>Hi all, Kindly help me, I stuck in my installation. snortadmin@snortdemo:/home/sno$ sudo /usr/local/snort/bin/snort -u snort -g snort -c /usr/local/snort/etc/snort.conf -i eth1 Running in IDS mode --== Initializing Snort ==-- Initializing Output Plugins! Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file "/usr/local/snort/etc/snort.conf" PortVar 'HTTP_PORTS' defined : [ 80:81 311 383 591 593 901 1220 1414 1741 1830 2301 2381 2809 3128 3702 4343 4848 5250 7001 7145 7510 7777 7779 8000 8008 8014 8028 8080 8088 8090 8118 8123 8180:8181 8243 8280 8300 8800 8888 8899 9000 9060 9080 9090:9091 9443 9999 11371 50002 55555 ] PortVar 'SHELLCODE_PORTS' defined : [ 0:79 81:65535 ] PortVar 'ORACLE_PORTS' defined : [ 1024:65535 ] PortVar 'SSH_PORTS' defined : [ 22 ] PortVar 'FTP_PORTS' defined : [ 21 2100 3535 ] PortVar 'SIP_PORTS' defined : [ 5060:5061 5600 ] PortVar 'FILE_DATA_PORTS' defined : [ 80:81 110 143 311 383 591 593 901 1220 1414 1741 1830 2301 2381 2809 3128 3702 4343 4848 5250 7001 7145 7510 7777 7779 8000 8008 8014 8028 8080 8088 8090 8118 8123 8180:8181 8243 8280 8300 8800 8888 8899 9000 9060 9080 9090:9091 9443 9999 11371 50002 55555 ] PortVar 'GTP_PORTS' defined : [ 2123 2152 3386 ] Detection: Search-Method = AC-Full-Q Split Any/Any group = enabled Search-Method-Optimizations = enabled Maximum pattern length = 20 Tagged Packet Limit: 256 Loading dynamic engine /usr/local/snort/lib/snort_dynamicengine/libsf_engine.so... done Loading all dynamic detection libs from /usr/local/snort/lib/snort_dynamicrules... Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/nntp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/p2p.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/icmp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/smtp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-client.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-activex.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/chat.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/multimedia.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-misc.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/dos.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/snmp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/misc.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/imap.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/specific-threats.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/netbios.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/exploit.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/bad-traffic.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-iis.so... done Finished Loading all dynamic detection libs from /usr/local/snort/lib/snort_dynamicrules Loading all dynamic preprocessor libs from /usr/local/snort/lib/snort_dynamicpreprocessor/... Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so... ERROR: Failed to load /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so: /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so: cannot open shared object file: No such file or directory Fatal Error, Quitting.. snortadmin@snortdemo:/home/sno$ it is the error, please help. Thanks in advance. ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- cant start snot Shanavas kt (Dec 05)
- Message not available
- Message not available
- Fwd: cant start snot Leonardo Pezente (Dec 05)
- Re: cant start snot Leonardo Pezente (Dec 06)
- Message not available
- Message not available