Project

General

Profile

Actions

Support #7677

closed

"suricata.rule" library not found on 8.0.0-beta1

Added by jghs chha 3 months ago. Updated about 24 hours ago.

Status:
Closed
Priority:
Normal
Assignee:
Affected Versions:
Label:

Description

First of all, I would like to express my heartfelt gratitude for your hard work and outstanding contributions to the Suricata project.
I recently encountered an issue while using Suricata 8.0.0-beta1 and would like to seek your assistance. After the previous issue regarding "fast.lua: update script to reflect library use" (https://redmine.openinfosecfoundation.org/issues/7656) was resolved, I updated the fast.lua script and attempted to use it. However, I ran into an error indicating that the "suricata.rule" library was not found.

[472729] Notice: suricata: This is Suricata version 8.0.0-beta1 RELEASE running in USER mode
[472729] Info: cpu: CPUs/cores online: 4
[472729] Info: suricata: Setting engine mode to IDS mode by default
[472729] Info: exception-policy: master exception-policy set to: auto
[472729] Info: logopenfile: fast output device (regular) initialized: fast.log
[472729] Info: logopenfile: eve-log output device (regular) initialized: eve.json
[472729] Info: logopenfile: stats output device (regular) initialized: stats.log
[472729] Info: output-lua: enabling script fast8.lua
[472729] Error: output-lua: couldn't prime file: /suricata/rules/fast.lua:20: module 'suricata.rule' not found:
        no field package.preload['suricata.rule']
        no file ''
        no file ''
        no file ''
[472729] Error: output-lua: couldn't initialize script
[472729] Warning: runmodes: output module "lua": setup failed
[472729] Info: detect: 1 rule files processed. 509 rules successfully loaded, 0 rules failed, 0 rules skipped
[472729] Info: threshold-config: Threshold config parsed: 0 rule(s) found
Actions #1

Updated by Victor Julien 3 months ago

This will become available in the next release, which is most likely the 8.0.0-rc1 release. If you want to test it now, you can use the git master branch.

Actions #2

Updated by jghs chha 2 months ago

Victor Julien wrote in #note-1:

This will become available in the next release, which is most likely the 8.0.0-rc1 release. If you want to test it now, you can use the git master branch.

OKEY thanks your reply!

Actions #3

Updated by Philippe Antoine 1 day ago

  • Target version changed from Support to TBD
Actions #4

Updated by Philippe Antoine 1 day ago

  • Status changed from New to Feedback
  • Affected Versions deleted (8.0.0)

So, fixed in 8 final ?

Actions #5

Updated by Jason Ish about 24 hours ago

  • Tracker changed from Bug to Support
  • Status changed from Feedback to Closed
  • Target version deleted (TBD)

Closing. This was because the default documentation page was on a new release than the beta release.

Actions

Also available in: Atom PDF