Re: Could not stat dynamic module path "/usr/lib64/snort_dynamicrule"

[Jefferson Diego Gomes Rosa <jeffersondiego8 () gmail com>]

You can just comment all dinamicdetection entries at your snort.conf:
#dynamicdetection directory /usr/lib64/snort_dynamicrules

Em 17 de dezembro de 2011 23:08, Shane <
software.research.development () gmail com> escreveu:

> I know this has been asked a million times, but I'm not finding what
> I'm supposed to do to /usr/lib64/snort_dynamicrules directory which is
> empty. I'm trying to get snort 2.9.0.5 started in IDS mode on gentoo
> and getting the following error.
>
> Any help much appreciated.
>
>
> --- this is from /var/log/messages
>
> Dec 17 18:05:13 wimpy snort[6643]: Found pid path directive
> (/var/run/snort)
> Dec 17 18:05:13 wimpy snort[6643]: Running in IDS mode
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]:         --== Initializing Snort ==--
> Dec 17 18:05:13 wimpy snort[6643]: Initializing Output Plugins!
> Dec 17 18:05:13 wimpy snort[6643]: Initializing Preprocessors!
> Dec 17 18:05:13 wimpy snort[6643]: Initializing Plug-ins!
> Dec 17 18:05:13 wimpy snort[6643]: Parsing Rules file
> "/etc/snort/snort.conf"
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'HTTP_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 80 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'SHELLCODE_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 0:79 81:65535 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'ORACLE_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 1521 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: PortVar 'FTP_PORTS' defined :
> Dec 17 18:05:13 wimpy snort[6643]:  [ 21 ]
> Dec 17 18:05:13 wimpy snort[6643]:
> Dec 17 18:05:13 wimpy snort[6643]: FATAL ERROR: parser.c(5245) Could
> not stat dynamic module path "/usr/lib64/snort_dynamicrule": No such
> file or directory.
> Dec 17 18:05:13 wimpy /etc/init.d/snort[6634]: ERROR: snort failed to start
>
>
> ------------------------------------------------------------------------------
> Learn Windows Azure Live!  Tuesday, Dec 13, 2011
> Microsoft is holding a special Learn Windows Azure training event for
> developers. It will provide a great way to learn Windows Azure and what it
> provides. You can attend the event by watching it streamed LIVE online.
> Learn more at http://p.sf.net/sfu/ms-windowsazure
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!



-- 

   *Best Regards,*



Jefferson *“**Diede”* Diego

Network Administrator / Network Engineer
 *Nextel**:* 55*86*248729  *iDEN:*  +55-11-7763-9947*
Mobile: * +55-11-7598-6750

*Linux User:* 449363

------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!