Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug
Bug#: 166874
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Netmon Herd <netmon@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Mike Gualtieri <mike.gualtieri@gmail.com>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 166874 depends on: Show dependency tree
Bug 166874 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug


Description:   Opened: 2007-02-14 18:26 0000
I upgraded my version of snort today to find it didn't load properly, due to
the new dynamic preprocesors.  Two issues here, and fixing both resolved the
issue.

1.  The dynamicplugin USE flag shoudl be enabled by default, as snort will nto
start without this flag enabled (or I guess edits are made to snort.conf to
eliminate all calls to this).

Without this USE flag enabled this error shows in the logs:
FATAL ERROR: /etc/snort/snort.conf(197) => Unknown rule type:
dynamicpreprocessor

2.  The default snort.conf points to an incorrect place (/usr/local instead of
/usr) to load the dynamic engine.

This error results:
Loading dynamic engine /usr/local/lib/snort_dynamicengine/libsf_engine.so...
FATAL ERROR: Failed to load /usr/local/lib/snort_dynamicengine/libsf_engine.so:
/usr/local/lib/snort_dynamicengine/libsf_engine.so: cannot open shared object
file: No such file or directory

These two lines in snort.conf need to be changed to be:
dynamicpreprocessor directory /usr/lib/snort_dynamicpreprocessor/
dynamicengine /usr/lib/snort_dynamicengine/libsf_engine.so



Reproducible: Always

Steps to Reproduce:
1.  Install snort via the default useflags
2.  /etc/init.d/snort start
3. This should result in an error
Actual Results:  
See description

Expected Results:  
See description

See description

------- Comment #1 From Daniel Black 2007-02-28 10:38:45 0000 -------
Thanks for the suggestions Mike. Both are included in snort-2.6.1.3-r1 as
follows.

1. Took your later suggestion and commented out the config of dynamic processor
if dynamicplugin was not selected.

2. Paths have been corrected.

Hope this correct the previous faults for you.

Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug