Snort: Re: Unable to create stub so rules files

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 27/11/2012 15:17, C. L. Martinez wrote:
> Yes, validates until end:
> Running in Test mode
<snip>
> Loading dynamic engine
> /opt/snort/lib/snort_dynamicengine/libsf_engine.so... done
Okay - so after this point it should load your SOs

What do you have set as 

dynamicdetection directory /x/x/x

in snort.conf - and is it empty?

Seeing as the configuration validates you can try running PP
and seeing where it puts p2p.so/chat.so/etc.

I'd also suggest checking what 'distro' is set to in pulledpork.conf
and whether it matches the actual OS.

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQtNxfAAoJELhVoVpEMS6RuxsH/RrAcqSCbVUnqRGXlAljY8xW
mASf5GuZz9XO4G0VBJsp7DmkwffX+rZ1mPtwsuWWx/idn1IwkLba6EnL/Ls4Psh4
sMwewWY1d7jSWfRMp2GdYfAumN2Dxggf0wJ6b0KKSrG7dMblkJQjP1RQpWJMbi25
od4KXmtJw8fQb8biiadt9/HCTEqG//Y66vnQzLZ8MVzGcFGElR4ulaf1A0YTfMUG
Sd2+yAgteFgr67TiD5CN789kplfrKjSV2VQrf4UtJ6SOktI51R0P+5wkUcfoeWfH
xgWwxRQjrxCPBEOnP+XNZnCgxXsOldmuDyFeA7YpPBPpL0gBXMM+8sF8ZYBAUEc=
=yHMg
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!