Several problems encountered during snort Installation

Source: Internet
Author: User

I. Three problems occurred during the # snort-c/usr/local/snort/etc/snort. conf execution:
1,
ERROR: parser. c (5047) cocould not stat dynamic module path "/usr/local/lib/snort_dynamicengine/libsf_engine.so": No such file or directory.

Fatal Error, Quitting ..
Cause: the directory where the/usr/local/lib/snort_dynamicengine/libsf_engine.so file is located is not found.
Solution: Create a soft link to/usr/local/lib from the snort_dynamicpreprocessor directory in the lib directory under the snort installation directory.
For example, ln-s/usr/local/snort/lib/snort_dynamicpreprocessor/usr/local/lib/snort_dynamicpreprocessor

2,
ERROR: parser. c (5047) cocould not stat dynamic module path "/usr/local/lib/snort_dynamicengine/libsf_engine.so": No such file or directory.

Fatal Error, Quitting ..
Cause: the directory where the/usr/local/lib/snort_dynamicengine/libsf_engine.so file is located is not found.
Solution: Create a soft link to/usr/local/lib from the snort_dynamicengine directory in the lib directory under the snort installation directory.
For example, ln-s/usr/local/snort/lib/snort_dynamicengine/usr/local/lib/snort_dynamicengine

3,
ERROR: parser. c (5047) cocould not stat dynamic module path "/usr/local/lib/snort_dynamicrules/bad-traffic.so": No such file or directory.

Fatal Error, Quitting ..
Cause: the directory where the/usr/local/lib/snort_dynamicrules/bad-traffic.so file is located is not found.
Solution: Under the snort installation directory so_rules/precompiled/Centos-5-4/i386/2.8.6.0 directory, create a soft link to/usr/local/lib.
For example, ln-s/usr/local/snort/so_rules/precompiled/Centos-5-4/I386/2.8.6.0/usr/local/lib/snort_dynamicrules
(Select the correct operating system version and CPU type based on the actual situation)

2. During compilation and installation of snort, the following message is displayed:
ERROR:/usr/local/snort/etc/snort. conf (193) => Invalid keyword compress_depth for global configuration.
Cause: -- enable-zlib is not included during compilation.
Solution: Clear all compiled and installed snort information, and then compile and install it. The -- enable-zlib parameter is included during compilation.
Note: I am re-overwriting the compilation (with the -- enable-zlib parameter) and the installation is unsuccessful. I do not know whether the previous snort information must be cleared or the RP has a problem.

3. the prompt is displayed during the web configuration of the base:
Your PHP Logging Level is too high to handle the running of BASE!
Please set the error_reporting variable to at least E_ALL &~ E_NOTICE in your php. ini!
The directory where BASE is installed does not allow the web server to write.
This will prevent the setup progam from creating the base_conf.php file. You have two choices.
1. Make the directory writeable for the web server user.
2. When the set up is done, copy the information displayed to the screen and use it to create a base_conf.php.

Cause:
0. The PHP log level prompted to run the base is too high.
1. The snort web directory has no write permission;
2. The parameters in base_conf.php are incorrect;
Solution:
0. Edit php. ini, find error_reporting, and change it to error_reporting = E_ALL &~ E_NOTICE
1. Modify the web directory permission of snort to 757 or 777
2. Set relevant parameters (snort Database Name, user name, password, database type, database location, and other information) in the base_conf.php file.

4. Not Using PCAP_FRAMES
Solution:
# Export PCAP_FRAMES = "Foo Bar This setting has no impact on my libpcap instance"
(Modify the user's environment variables. Solution Source:Http://leonward.wordpress.com/2008/07/18/not-using-pcap_frames-aka-when-good-verbosity-goes-bad/)

V. ERROR: The php session does not contain the array key "adodbpath". This is typically caused by not having allowed cookies. Exiting.
Cause :???
Solution :???

I have not fixed this problem myself. I am waiting to check it.

6. On the Base web page:
Check your Pear: Image_Graph installation!

* Image_Graph can be found here: at http://pear.veggerby.dk/. Without this library no

Graphing operations can be saved med.
* Make sure PEAR libraries can be found by php at all:

Pear config-show | grep "PEAR directory"
PEAR directory php_dir/usr/share/pear

This path must be part of the include path of php (cf./etc/php. ini ):

Php-I | grep "include_path"
Export de_path =>.:/usr/share/pear:/usr/share/php =>.:/usr/share/pear:/usr/share/php

Reason: Base requires the plotting plug-in Image_Graph, which is not installed.
Solution: GoHttp://pear.veggerby.dk/Download Image_Canvas and Image_Graph for installation. You can also run the following command to download and install the image on your own:
# Pear install Image_Canvas-0.3.2
Downloading Image_Canvas-0.3.2.tgz...
Starting to download Image_Canvas-0.3.2.tgz (54,698 bytes)
... Done: 54,698 bytes
Downloading Image_Color-1.0.4.tgz...
Starting to download Image_Color-1.0.4.tgz (9,501 bytes)
... Done: 9,501 bytes
Install OK: channel: // pear.php.net/Image_Color-1.0.4
Install OK: channel: // pear.php.net/Image_Canvas-0.3.2

# Pear install Image_Graph-0.7.2
Did not download dependencies: pear/Numbers_Roman, pear/Numbers_Words, use -- alldeps or -- onlyreqdeps to download automatically
Pear/Image_Graph can optionally use package "pear/Numbers_Roman"
Pear/Image_Graph can optionally use package "pear/Numbers_Words"
Downloading Image_Graph-0.7.2.tgz...
Starting to download Image_Graph-0.7.2.tgz (368,056 bytes)
..................................... Done: 368,056 bytes
Install OK: channel: // pear.php.net/Image_Graph-0.7.2
(Note: The php-pear component must be installed in advance !)

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.