Re: First time snorting ... ERROR: The dynamic detection library ...

[Alan McKay <alan.mckay () gmail com>]

On Thu, Nov 14, 2013 at 12:27 PM, Alan McKay <alan.mckay () gmail com> wrote:
>  So I should have taken snortrules-snapshot-2955.tar.gz
>
> I'll go try that now and see what I come up with ...

I unpacked the above 2955 file by the same means as 2950 - which I see
creates parallel directories for that version.   Tried to start again
and same error.  So then I removed the 2,9.5.0 direoctories and tried
to start again with same error

ERROR: The dynamic detection library
"/usr/local/snort/lib/snort_dynamicrules/netbios.so" version 1.0
compiled with dynamic engine library version 2.0 isn't compatible with
the current dynamic engine library
"/usr/local/snort/lib/snort_dynamicengine/libsf_engine.so" version
2.1.
Fatal Error, Quitting..

So below after removing the 2.9.5.0 directories I have this :

root@ogic2:~/snort# find /usr/local/snort/ -name \*netbios\*

/usr/local/snort/rules/netbios.rules

/usr/local/snort/lib/snort_dynamicrules/netbios.so

/usr/local/snort/so_rules/netbios.rules

/usr/local/snort/so_rules/src/netbios_smb-filename-len-overflow.c

/usr/local/snort/so_rules/src/netbios_smb-rap-read-access-violation.c

/usr/local/snort/so_rules/src/netbios_writex.c

/usr/local/snort/so_rules/src/netbios_smb-andx-reply.c

/usr/local/snort/so_rules/src/netbios_kb961501-smb-printss-reponse.c

/usr/local/snort/so_rules/precompiled/OpenBSD-5-3/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenBSD-5-3/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/RHEL-6-0/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/RHEL-6-0/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Ubuntu-10-4/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Ubuntu-10-4/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Centos-5-4/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Centos-5-4/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FreeBSD-8-1/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FreeBSD-8-1/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenSUSE-11-4/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenSUSE-11-4/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/RHEL-5-5/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/RHEL-5-5/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenSUSE-12-1/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenSUSE-12-1/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Debian-6-0/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Debian-6-0/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Slackware-13-1/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FreeBSD-9-0/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FreeBSD-9-0/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FC-14/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FC-14/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FC-12/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/FC-12/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenBSD-5-2/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/OpenBSD-5-2/i386/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Ubuntu-12-04/x86-64/2.9.5.5/netbios.so

/usr/local/snort/so_rules/precompiled/Ubuntu-12-04/i386/2.9.5.5/netbios.so

root@ogic2:~/snort#





-- 
“Don't eat anything you've ever seen advertised on TV”
         - Michael Pollan, author of "In Defense of Food"

------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!