Snort mailing list archives

0 Dynamic rules?


From: jorbru30 () comcast net
Date: Fri, 6 Jul 2012 06:32:28 +0000 (UTC)



Hi Everyone, 

  

When I started snort rules, I was getting several messages with " DynamicPlugin : Rule [X:Y] not enabled in 
configuration, rule will not be used" (some messages from my screen are posted below). When I uncommented  "dynamic 
library rules", these messages disappeared but snort output still shows "0 Dynamic rules" read. 

=== 

6271 Snort rules read 
    6271 detection rules 
    0 decoder rules 
    0 preprocessor rules 
6271 Option Chains linked into 521 Chain Headers 
0 Dynamic rules 

==== 

  

My question is do I need to do anything more to enable dynamic rules? Are these rules as important as the regular 
rules? Please help me understand and how to enable these type of rules. 

  

My snort output also shows "0 decode rules" and "0 preprocessor rules". Could this has any impact on the dynamic rules? 

  

DynamicPlugin : Rule [3:14252] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:14253] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:14254] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18213] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18400] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18405] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18409] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18410] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18411] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18412] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18421] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18444] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18449] not enabled in configuration, rule will not be used. 
DynamicPlugin : Rule [3:18501] not enabled in configuration, rule will not be used. 


I appreciate your help. 

  

Thanks! 

  

Jorda .
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: