Snort configuration error - Unknown rule type: dynamicpreprocessor

Discussion in 'Installation/Configuration' started by badgerbox76, Oct 12, 2006.

  1. badgerbox76

    badgerbox76 Member

    I am trying out the http://howtoforge.com/intrusion_detection_base_snort howto. Every thing went well until i ran across this error. Whats going wrong. When i configured it i had the --enable-dynamicplugin option on. I don't see why i am getting this. Thanks

    snort -c /etc/snort/snort.conf output
    Code:
    root@monitorwaves:/etc/snort# snort -c /etc/snort/snort.conf                    Running in IDS mode
    
            --== Initializing Snort ==--
    Initializing Output Plugins!
    Initializing Preprocessors!
    Initializing Plug-ins!
    Parsing Rules file /etc/snort/snort.conf
    
    +++++++++++++++++++++++++++++++++++++++++++++++++++
    Initializing rule chains...
    Var 'EXTERNAL_NET' defined, value len = 15 chars, value = !192.168.0.5/32
    Var 'DNS_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32
    Var 'SMTP_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32
    Var 'HTTP_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32
    Var 'SQL_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32
    Var 'TELNET_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32
    Var 'SNMP_SERVERS' defined, value len = 14 chars, value = 192.168.0.5/32
    Var 'HTTP_PORTS' defined, value len = 2 chars, value = 80
    Var 'SHELLCODE_PORTS' defined, value len = 3 chars, value = !80
    Var 'ORACLE_PORTS' defined, value len = 4 chars, value = 1521
    Var 'AIM_SERVERS' defined, value len = 185 chars
       [64.12.24.0/23,64.12.28.0/23,64.12.161.0/24,64.12.163.0/24,64.12.200.0/24,205.188.3.0/24,205.188.5.0/24,205.188.7.0/24,205.188.9
       .0/24,205.188.153.0/24,205.188.179.0/24,205.188.248.0/24]
    Var 'RULE_PATH' defined, value len = 16 chars, value = /etc/snort/rules
    ERROR: /etc/snort/snort.conf(182) => Unknown rule type: dynamicpreprocessor
    Fatal Error, Quitting..
    root@monitorwaves:/etc/snort#
    
     
  2. falko

    falko Super Moderator Howtoforge Staff

  3. badgerbox76

    badgerbox76 Member

    ok i have read every thing there and nothing has helped. I tryed snort uninstall in the /root/snorttemp/snort-2.6.0.2 or what ever directory then i reconfigured it then make all then make check then make install and snort -c /etc/snort/snort.conf and i still got the same error message. Althrouth one time during one of the uninstall and reinstall i did get snort to run when i tyed snort but when i ran snort -c /etc/snort/snort.conf i got the same error. What nexted?
     
  4. falko

    falko Super Moderator Howtoforge Staff

    What's in your snort.conf?
     
  5. badgerbox76

    badgerbox76 Member

  6. badgerbox76

    badgerbox76 Member

  7. falko

    falko Super Moderator Howtoforge Staff

    And you really tried all options from the two links I posted above?
     
  8. badgerbox76

    badgerbox76 Member

    Yes i listed all the things i have tryed so far and i belive that i did them all. I would like to reinstall it and try again but when i use the ./uninstall or snort uninstall the directory /etc/snort still contains file so i would belive that the other directorys would also contain files.
     
  9. falko

    falko Super Moderator Howtoforge Staff

    Then I don't know what's causing your problem... :(
     

Share This Page