Snort Forums Archive

Archive Home » Windows » snort 2.6.1 question

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

snort 2.6.1 question

Posted by dcornwall on November 17, 2006 12:47:03

I have been running snort 2.4 on server2003 and decided to upgrade to 2.6.1. I ran into a few problems that i thought someone might have an idea on. When i start up snort with the -v option it works and is displaying output. But when i start it as a service like i had it configured for 2.4 i get an error in my config pertaining to the output, whether it is to alet.ids or my mysql databases. The error says Missing/incorrect dynamic detection lib specifier. I have not changed the database schema and was wondering if that might be the cause, and if it is why does it give the error for the fast alert to alert.ids file.

Thanks

Dave

Posted by phyxious on November 27, 2006 03:30:21

In your config file step #2 is configure your dynamic loaded libraries, look for the following 2 lines and change them to something like:

Original:
dynamicpreprocessor directory /usr/local/lib/snort_dynamicpreprocessor/

Change to:
dynamicpreprocessor directory c:\snort\lib\snort_dynamicpreprocessor (where you have your snort directory, no trailing slash at the end)

Original:
dynamicengine /usr/local/lib/snort_dynamicengine/libsf_engine.so

Change to:
dynamicengine C:\Snort\lib\snort_dynamicengine\sf_engine.dll (your snort directory)

Posted by dcornwall on November 30, 2006 04:40:16

Thanks I will try that. I cant believe i mised that