Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [Snort-users] Re: Rules for Snort 2.6 RC1 |
|---|---|
| Date: | Fri, 28 Apr 2006 15:13:37 -0500 |
On 0, Jason Monroe <monroe@arcsight.com> wrote:
Hi All, Maybe I missed it, but perhaps if there was a README in the tarball, or an additional element that was added to the configure script that would call this option as needing a directory path as an argument it might make life a little easier.
I'm guessing you probably did....
:0>There should be examples in the snort.conf.
which says:
###################################################
# Step #2: Configure dynamic loaded libraries
#
# If snort was configured to use dynamically loaded libraries,
# those libraries can be loaded here.
#
# Each of the following configuration options can be done via
# the command line as well.
#
# Load all dynamic preprocessors from the install path
# (same as command line option --dynamic-preprocessor-lib-dir)
#
# dynamicpreprocessor directory /usr/local/lib/snort_dynamicpreprocessor/
#
# Load a specific dynamic preprocessor library from the install path
# (same as command line option --dynamic-preprocessor-lib)
#
# dynamicpreprocessor file /usr/local/lib/snort_dynamicpreprocessor/libdynamicex
ample.so
#
# Load a dynamic engine from the install path
# (same as command line option --dynamic-engine-lib)
#
# dynamicengine /usr/local/lib/snort_dynamicengine/libsf_engine.so
#
# Load all dynamic rules libraries from the install path
# (same as command line option --dynamic-detection-lib-dir)
#
# dynamicdetection directory /usr/local/lib/snort_dynamicrule/
#
# Load a specific dynamic rule library from the install path
# (same as command line option --dynamic-detection-lib)
#
# dynamicdetection file /usr/local/lib/snort_dynamicrule/libdynamicexamplerule.s
o
The manual does not yet contain information on this option or on the
preprocessors that are available dynamically, This is afterall, a
release candidate.
Details on the preprocessors are available in the README.SMTP and
README.ftptelnet of the docs directory in the snort source tarball.
+--------------------------------------------------------------------+
Nigel Houghton Research Engineer Sourcefire Inc.
Vulnerability Research Team
There is no theory of evolution, just a list
of creatures Vin Diesel allows to live.
-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: [Snort-users] Re: Rules for Snort 2.6 RC1, Jason Monroe |
|---|---|
| Next by Date: | [Snort-users] sfportscan use config ignore_ports?, John Newman |
| Previous by Thread: | RE: [Snort-users] Re: Rules for Snort 2.6 RC1, Jason Monroe |
| Next by Thread: | [Snort-users] sfportscan use config ignore_ports?, John Newman |
| Indexes: | [Date] [Thread] [Top] [All Lists] |