Snort-dev and 2.1
-
Is snort working I am getting this error
ERROR: Can't set DAQ BPF filter to 'start' (pcap_daq_set_filter: pcap_compile: syntax error)!
that could be caused by starting snort with -f instead of-c
snort -c /usr/local/etc/snort/snort.conf -l /var/log/snort -v -i bge0 that does not display an error
I hope you guys can point in in right direction.
Also it seems that dynamic processors are missing and config file points to wrong location for dynamic preprocessor libraries
It seems that # path to dynamic preprocessor libraries
dynamicpreprocessor directory /usr/local/lib/snort/dynamicpreprocessor/path to base preprocessor engine
dynamicengine /usr/local/lib/snort/dynamicengine/libsf_engine.so
path to dynamic rules libraries
dynamicdetection directory /usr/local/lib/snort/dynamicrules
-
I removed and snort-dev and installed snort but now I get /snort.rules(26) Undefined variable in the string: $EXTERNAL_NET.
Fatal Error, Quitting..