Am Montag 27 August 2007 schrieb Javier Fernández-Sanguino Peña: > On Mon, Aug 27, 2007 at 07:08:02PM +0200, Hans-J. Ullrich wrote: > > sorry, which line do you mean ??? > > From my first mail: > > Could you please try and comment the following line from your snort.conf > and restart it to see if it works? > > dynamicengine /usr/lib/snort_dynamicengine/libsf_engine.so > > Regards > > Javier Hi Javier,
I commented it out. It will not start. But as you see in /var/log/daemon.log, now there is another error. --------------- protheus2:/etc/snort# tail -f /var/log/daemon.log Aug 27 19:25:49 protheus2 snort[32423]: +-----------------------[thresholding-local]----------------------------------- Aug 27 19:25:49 protheus2 snort[32423]: | none Aug 27 19:25:49 protheus2 snort[32423]: +-----------------------[suppression]------------------------------------------ Aug 27 19:25:49 protheus2 snort[32423]: | none Aug 27 19:25:49 protheus2 snort[32423]: ------------------------------------------------------------------------------- Aug 27 19:25:49 protheus2 snort[32423]: Rule application order: activation->dynamic->pass->drop->alert->log Aug 27 19:25:49 protheus2 snort[32423]: Log directory = /var/log/snort Aug 27 19:25:49 protheus2 snort[32423]: Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/... Aug 27 19:25:49 protheus2 snort[32423]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... Aug 27 19:25:49 protheus2 snort[32423]: FATAL ERROR: Failed to load /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so: /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so: wrong ELF class: ELFCLASS32 ------------------ But think, it is the same reason: 32-bit-libs. Hans
