-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Thanks for the responses.
Yes, these and all the other preprocessors are in this dir and linked. Here
is the output from this dir:
sloa@X4ft11:/usr/local/lib/snort_dynamicpreprocessor$ ls -la
total 1268
drwxr-xr-x 2 root root 4096 2007-01-28 13:57 .
drwxr-xr-x 6 root root 4096 2007-01-25 21:12 ..
- -rw-r--r-- 1 root root 150854 2007-01-28 13:57 libsf_dcerpc_preproc.a
- -rwxr-xr-x 1 root root 989 2007-01-28 13:57 libsf_dcerpc_preproc.la
lrwxrwxrwx 1 root root 29 2007-01-28 13:57 libsf_dcerpc_preproc.so ->
libsf_ dcerpc_preproc.so.0.0.0
lrwxrwxrwx 1 root root 29 2007-01-28 13:57 libsf_dcerpc_preproc.so.0 ->
libs f_dcerpc_preproc.so.0.0.0
- -rwxr-xr-x 1 root root 93883 2007-01-28 13:57
libsf_dcerpc_preproc.so.0.0.0
- -rw-r--r-- 1 root root 51862 2007-01-28 13:57 libsf_dns_preproc.a
- -rwxr-xr-x 1 root root 968 2007-01-28 13:57 libsf_dns_preproc.la
lrwxrwxrwx 1 root root 26 2007-01-28 13:57 libsf_dns_preproc.so ->
libsf_dns _preproc.so.0.0.0
lrwxrwxrwx 1 root root 26 2007-01-28 13:57 libsf_dns_preproc.so.0 ->
libsf_d ns_preproc.so.0.0.0
- -rwxr-xr-x 1 root root 41482 2007-01-28 13:57 libsf_dns_preproc.so.0.0.0
- -rw-r--r-- 1 root root 302478 2007-01-28 13:57 libsf_ftptelnet_preproc.a
- -rwxr-xr-x 1 root root 1010 2007-01-28 13:57 libsf_ftptelnet_preproc.la
lrwxrwxrwx 1 root root 32 2007-01-28 13:57 libsf_ftptelnet_preproc.so ->
lib sf_ftptelnet_preproc.so.0.0.0
lrwxrwxrwx 1 root root 32 2007-01-28 13:57 libsf_ftptelnet_preproc.so.0
-> l ibsf_ftptelnet_preproc.so.0.0.0
- -rwxr-xr-x 1 root root 194949 2007-01-28 13:57
libsf_ftptelnet_preproc.so.0.0.0
- -rw-r--r-- 1 root root 173890 2007-01-28 13:57 libsf_smtp_preproc.a
- -rwxr-xr-x 1 root root 975 2007-01-28 13:57 libsf_smtp_preproc.la
lrwxrwxrwx 1 root root 27 2007-01-28 13:57 libsf_smtp_preproc.so ->
libsf_sm tp_preproc.so.0.0.0
lrwxrwxrwx 1 root root 27 2007-01-28 13:57 libsf_smtp_preproc.so.0 ->
libsf_ smtp_preproc.so.0.0.0
- -rwxr-xr-x 1 root root 108681 2007-01-28 13:57 libsf_smtp_preproc.so.0.0.0
- -rw-r--r-- 1 root root 56934 2007-01-28 13:57 libsf_ssh_preproc.a
- -rwxr-xr-x 1 root root 968 2007-01-28 13:57 libsf_ssh_preproc.la
lrwxrwxrwx 1 root root 26 2007-01-28 13:57 libsf_ssh_preproc.so ->
libsf_ssh _preproc.so.0.0.0
lrwxrwxrwx 1 root root 26 2007-01-28 13:57 libsf_ssh_preproc.so.0 ->
libsf_s sh_preproc.so.0.0.0
- -rwxr-xr-x 1 root root 46923 2007-01-28 13:57 libsf_ssh_preproc.so.0.0.0
Cheers,
James Friesen
-----Original Message-----
From: rmkml [mailto:rmkml@free.fr]
Hi,
do you have libsf_ftptelnet_preproc.so on this dir ?
/usr/local/lib/snort_dynamicpreprocessor/
and please send "ls -la /usr/local/lib/snort_dynamicpreprocessor/"
Regards
Rmkml
On Mon, 29 Jan 2007, info+lucretia.ca wrote:
Hello.
I'm trying to build 2.7.0.beta1 on Ubuntu 6.06. So far things are
working well, except when I attempt to turn on the dynamic
preprocessors.
I encountered an ID error when I simply uncommented them so I added
some text to make them look like the command line
counterparts. I'm
not certain whether they work from the command line, as I'm not
interested in starting them this way.
Starting snort with 'sudo' using the one and only parameter: '-c
/etc/snort/snort.conf' I get the following output:
ERROR: /etc/snort/snort.conf(539): Bad rule in rules file
This line contains:
dynamic-preprocessor-lib
/usr/local/lib/snort_dynamicpreprocessor/libsf_ftptelnet_preproc.so
I get this error with any dynamic preprocessor enabled in
snort.conf.
I've reviewed the documentation and could find nothing
indicating the
correct format for the 'dynamic-*' options for snort.conf
(the command
line is well documented...) and I reviewed the list and
forums with no
luck on a solution.
Cheers,
James Friesen, CIO
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
iD8DBQFFvqufRMg8qN6NZpARAqNcAKCVWgarRFvq/SlqFCpTHqsE7CrpNgCePpm+
Lfu/SPA57O/2OCvCh2DyP/I=
=W+AH
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
