Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort Update error 422

    Scheduled Pinned Locked Moved IDS/IPS
    28 Posts 10 Posters 3.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jdeloach @fireodo
      last edited by

      @fireodo said in Snort Update error 422:

      Hi everybody,

      since this morning I get this error when trying to update Snort rules:
      " Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
      Snort Subscriber rules md5 download failed.
      Server returned error code 422.
      Server error message was:
      Snort Subscriber rules will not be updated."

      Snort is on 4.1.4_3 and pfsense on 2.5.2.

      Anybody else too?

      Regards,
      fireodo

      I have the same error on my system as well. I wonder if it has anything to do with the new version of Snort, 2.9.19.0, being released a couple days ago.
      Maybe @bmeeks will chime in later this morning. Seems like Snort has screwed up the rules set a few times recently.

      fireodoF 1 Reply Last reply Reply Quote 1
      • S
        Scooter13
        last edited by

        Same issue:

        snort-2.9.18_1

        Starting rules update... Time: 2021-12-08 00:01:08
        Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
        Snort Subscriber rules md5 download failed.
        Server returned error code 422.
        Server error message was:
        Snort Subscriber rules will not be updated.

        1 Reply Last reply Reply Quote 0
        • fireodoF
          fireodo @jdeloach
          last edited by fireodo

          @jdeloach said in Snort Update error 422:

          I wonder if it has anything to do with the new version of Snort, 2.9.19.0, being released a couple days ago.

          This i guess in the meanwhile also ...

          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
          pfsense 2.8.0 CE
          Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

          1 Reply Last reply Reply Quote 0
          • I
            isewanus
            last edited by

            I have the same problem since last night even though I reinstalled the snort package.

            Starting rules update... Time: 2021-12-07 18:05:26
            Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
            Snort Subscriber rules md5 download failed.
            Server returned error code 422.
            Server error message was:
            Snort Subscriber rules will not be updated.

            pfSense+ 21.05.2-RELEASE
            snort package 4.1.4_3 (snort-2.9.18_1)

            1 Reply Last reply Reply Quote 0
            • fireodoF fireodo referenced this topic on
            • bmeeksB
              bmeeks
              last edited by

              Yeah, looks like we are behind on updating the binary. I will get an update submitted to the Netgate team. May take a day or two to get it through the review process, though.

              fireodoF I JonathanLeeJ 3 Replies Last reply Reply Quote 4
              • fireodoF
                fireodo @bmeeks
                last edited by

                @bmeeks said in Snort Update error 422:

                I will get an update submitted to the Netgate team. May take a day or two to get it through the review process, though.

                Thanks a lot, Bill!

                Kind regards,
                fireodo

                Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                pfsense 2.8.0 CE
                Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                1 Reply Last reply Reply Quote 0
                • I
                  isewanus @bmeeks
                  last edited by

                  @bmeeks Thank you for your kind help!

                  1 Reply Last reply Reply Quote 0
                  • bmeeksB
                    bmeeks
                    last edited by

                    I've posted a Snort package update for the Netgate/pfSense team to review and merge. Hopefully this happens in a day or two. The new Snort package version on pfSense will be 4.1.5 when it posts. It will contain the latest 2.9.19 snort binary.

                    1 Reply Last reply Reply Quote 4
                    • K Konstanti referenced this topic on
                    • fireodoF fireodo referenced this topic on
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      I forked off the QUIC discussion from this.

                      fireodoF 1 Reply Last reply Reply Quote 1
                      • fireodoF
                        fireodo @stephenw10
                        last edited by

                        @stephenw10 said in Snort Update error 422:

                        I forked off the QUIC discussion from this.

                        Thanks! 😏

                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                        pfsense 2.8.0 CE
                        Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                        JonathanLeeJ 1 Reply Last reply Reply Quote 2
                        • JonathanLeeJ
                          JonathanLee @fireodo
                          last edited by

                          @fireodo Hello is there a new link for the forked discussion on QUIC or is that part deleted now? I am still new to Netgate community posts. Sorry we got a bit side tracked with topics on this one. QUIC is new and exciting for the world of firewall software.

                          Make sure to upvote

                          fireodoF 1 Reply Last reply Reply Quote 0
                          • fireodoF
                            fireodo @JonathanLee
                            last edited by

                            @jonathanlee said in Snort Update error 422:

                            is there a new link for the forked discussion on QUIC

                            https://forum.netgate.com/topic/168388/snort-quic-detection

                            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                            pfsense 2.8.0 CE
                            Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                            1 Reply Last reply Reply Quote 2
                            • C
                              Chris.EQ
                              last edited by Chris.EQ

                              We are having same issue on our 10 PFSense firewalls...
                              Tried to update the "Snort Oinkmaster Code" from www.snort.org with no luck.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Have you upgraded to pkg 4.1.5? It's available in 2.5.2 now.

                                fireodoF JonathanLeeJ 2 Replies Last reply Reply Quote 1
                                • fireodoF
                                  fireodo @stephenw10
                                  last edited by

                                  @stephenw10 said in Snort Update error 422:

                                  Have you upgraded to pkg 4.1.5?

                                  Yes, everything is fine now! Thanks to Bill!

                                  Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                  SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                  pfsense 2.8.0 CE
                                  Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                                  1 Reply Last reply Reply Quote 2
                                  • J
                                    johnpitton
                                    last edited by

                                    The updated Snort pkg works on all 10 of my Netgate devices, some on 2.5.1 and some on 2.5.2.
                                    Thanks

                                    1 Reply Last reply Reply Quote 1
                                    • JonathanLeeJ
                                      JonathanLee @stephenw10
                                      last edited by

                                      @stephenw10

                                      Screen Shot 2021-12-10 at 10.02.21 AM.png

                                      I do not see it available as of yet, is there a workaround to update this?

                                      Make sure to upvote

                                      fireodoF 1 Reply Last reply Reply Quote 0
                                      • fireodoF
                                        fireodo @JonathanLee
                                        last edited by

                                        @jonathanlee said in Snort Update error 422:

                                        I do not see it available as of yet, is there a workaround to update this?

                                        Do you have made an Update? (console 13) or GUI System-> Update?

                                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                        pfsense 2.8.0 CE
                                        Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                                        JonathanLeeJ 1 Reply Last reply Reply Quote 1
                                        • JonathanLeeJ
                                          JonathanLee @fireodo
                                          last edited by

                                          @fireodo Screen Shot 2021-12-10 at 10.07.47 AM.png

                                          It says up to date.

                                          Make sure to upvote

                                          fireodoF J 2 Replies Last reply Reply Quote 0
                                          • fireodoF
                                            fireodo @JonathanLee
                                            last edited by

                                            @jonathanlee said in Snort Update error 422:

                                            It says up to date.

                                            I dont know if this Snort package is also for the devel-branch!

                                            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                            pfsense 2.8.0 CE
                                            Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                                            JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.