I am trying out the http://howtoforge.com/intrusion_detection_base_snort howto. Every thing went well until i ran across this error. Whats going wrong. When i configured it i had the --enable-dynamicplugin option on. I don't see why i am getting this. Thanks snort -c /etc/snort/snort.conf output Code: root@monitorwaves:/etc/snort# snort -c /etc/snort/snort.conf Running in IDS mode --== Initializing Snort ==-- Initializing Output Plugins! Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file /etc/snort/snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... Var 'EXTERNAL_NET' defined, value len = 15 chars, value = !192.168.0.5/32 Var 'DNS_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32 Var 'SMTP_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32 Var 'HTTP_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32 Var 'SQL_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32 Var 'TELNET_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32 Var 'SNMP_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32 Var 'HTTP_PORTS' defined, value len = 2 chars, value = 80 Var 'SHELLCODE_PORTS' defined, value len = 3 chars, value = !80 Var 'ORACLE_PORTS' defined, value len = 4 chars, value = 1521 Var 'AIM_SERVERS' defined, value len = 185 chars [64.12.24.0/23,64.12.28.0/23,64.12.161.0/24,64.12.163.0/24,64.12.200.0/24,205.188.3.0/24,205.188.5.0/24,205.188.7.0/24,205.188.9 .0/24,205.188.153.0/24,205.188.179.0/24,205.188.248.0/24] Var 'RULE_PATH' defined, value len = 16 chars, value = /etc/snort/rules ERROR: /etc/snort/snort.conf(182) => Unknown rule type: dynamicpreprocessor Fatal Error, Quitting.. root@monitorwaves:/etc/snort#
ok i have read every thing there and nothing has helped. I tryed snort uninstall in the /root/snorttemp/snort-2.6.0.2 or what ever directory then i reconfigured it then make all then make check then make install and snort -c /etc/snort/snort.conf and i still got the same error message. Althrouth one time during one of the uninstall and reinstall i did get snort to run when i tyed snort but when i ran snort -c /etc/snort/snort.conf i got the same error. What nexted?
Here is a link to my snort.conf file. I changed the format to txt, i also tryed to post it here but it was to big. http://monitorwaves.homelinux.com/snort.txt
Sorry if you could not connect to my server. My ISP is being a pain and blocking this port for now. Here is the new link http://monitorwaves.homelinux.com:443/monitorwaves.homelinux.com/web/snort.txt
Yes i listed all the things i have tryed so far and i belive that i did them all. I would like to reinstall it and try again but when i use the ./uninstall or snort uninstall the directory /etc/snort still contains file so i would belive that the other directorys would also contain files.