Project

General

Profile

Actions

Bug #7677

open

"suricata.rule" library not found on 8.0.0-beta1

Added by jghs chha 10 days ago. Updated 9 days ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

First of all, I would like to express my heartfelt gratitude for your hard work and outstanding contributions to the Suricata project.
I recently encountered an issue while using Suricata 8.0.0-beta1 and would like to seek your assistance. After the previous issue regarding "fast.lua: update script to reflect library use" (https://redmine.openinfosecfoundation.org/issues/7656) was resolved, I updated the fast.lua script and attempted to use it. However, I ran into an error indicating that the "suricata.rule" library was not found.

[472729] Notice: suricata: This is Suricata version 8.0.0-beta1 RELEASE running in USER mode
[472729] Info: cpu: CPUs/cores online: 4
[472729] Info: suricata: Setting engine mode to IDS mode by default
[472729] Info: exception-policy: master exception-policy set to: auto
[472729] Info: logopenfile: fast output device (regular) initialized: fast.log
[472729] Info: logopenfile: eve-log output device (regular) initialized: eve.json
[472729] Info: logopenfile: stats output device (regular) initialized: stats.log
[472729] Info: output-lua: enabling script fast8.lua
[472729] Error: output-lua: couldn't prime file: /suricata/rules/fast.lua:20: module 'suricata.rule' not found:
        no field package.preload['suricata.rule']
        no file ''
        no file ''
        no file ''
[472729] Error: output-lua: couldn't initialize script
[472729] Warning: runmodes: output module "lua": setup failed
[472729] Info: detect: 1 rule files processed. 509 rules successfully loaded, 0 rules failed, 0 rules skipped
[472729] Info: threshold-config: Threshold config parsed: 0 rule(s) found
Actions #1

Updated by Victor Julien 10 days ago

This will become available in the next release, which is most likely the 8.0.0-rc1 release. If you want to test it now, you can use the git master branch.

Actions #2

Updated by jghs chha 9 days ago

Victor Julien wrote in #note-1:

This will become available in the next release, which is most likely the 8.0.0-rc1 release. If you want to test it now, you can use the git master branch.

OKEY thanks your reply!

Actions

Also available in: Atom PDF