Add new comment
|
Hi @ all, I ran into some issues with my snort install on Debain 5r2. And I thought, it might be helpful to post the solutions I found: 1. While ./configure... I got mysql.h not found You need to install the package libmysqlclient-dev 2. Loading dynamic detection library /usr/local/lib/snort_dynamicrules/bad-traffic.so... ERROR: Failed to load /usr/local/lib/snort_dynamicrules/bad-traffic.so: /usr/local/lib/snort_dynamicrules/bad-traffic.so: cannot open shared object file: No such file or directory This one can be fixed by copying all files from <snort_src_folder>/so_rules/precompiled/Debian-Lenny/i386/2.8.4/ to /usr/local/lib/snort_dynamicrules/ 3. When trying to start snort, I also got the following: ERROR: ERROR /etc/snort/rules/exploit.rules(23): Couldn't resolve hostname HOME_NET That was tricky one, since it wasn't that easy to localize the evil's root. In snort.conf you have to change the line: var EXTERNAL_NET !HOME_NET to var EXTERNAL_NET !$HOME_NET Because the Dollar-sign is missing there. Hope this helps a few unlucky as I was ;-)
Reply |



Recent comments
1 day 14 hours ago
1 day 18 hours ago
1 day 19 hours ago
1 day 20 hours ago
1 day 20 hours ago
2 days 8 hours ago
2 days 21 hours ago
3 days 1 hour ago
3 days 2 hours ago
3 days 21 hours ago