In that case I get: Nov 25 20:07:34 n22 snort[9556]: FATAL ERROR: /etc/snort/snort.conf(574) unknown preprocessor "ftp_telnet" However if the USE flag is set, snort starts w/o a problem. Reproducible: Always
This is not a bug with the ebuild. ftp_telnet IS a dynamicplugin that is why snort fails to start. Either comment out ftp_telnet from the config or use the USE flag. It would be the same as using USE="-mysql" and then trying to ust the mysql database output plugin. There is a new ebuild for snort-2.8.4 at the following bug... bug#266288 You should update to the new version.