[Oisf-users] Suricata Error SC_ERR_NO_MD5_SUPPORT

[Victor Julien]

On 22-11-18 11:26, Gmail-ddehban wrote:
> I’m using Suricata 4.0.4,
> 
> I want to check md5 of files with this rule:
> 
>  
> 
> alert http any any -> any any (msg:"FILE MD5 Check against Malware
> Patrol blacklist"; filemd5: /root/2018.md5.txt; sid:10203040; rev:1;)
> 
>  
> 
> but after running suricata, it says:
> 
>  
> 
> <Error> - [ERRCODE: SC_ERR_NO_MD5_SUPPORT(209)] - no MD5 calculation
> support built in, needed for filemd5 keyword
> 
>  
> 
> Any suggestions?
> 

You'll have to make sure Suricata is built with libnss support.

Make sure to update to 4.0.6 while at it.

Cheers,
Victor

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------