Snort Update error 422

[fireodo]

@jdeloach said in Snort Update error 422:

I wonder if it has anything to do with the new version of Snort, 2.9.19.0, being released a couple days ago.

This i guess in the meanwhile also ...

[isewanus]

I have the same problem since last night even though I reinstalled the snort package.

Starting rules update... Time: 2021-12-07 18:05:26
Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
Snort Subscriber rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort Subscriber rules will not be updated.

pfSense+ 21.05.2-RELEASE
snort package 4.1.4_3 (snort-2.9.18_1)

[bmeeks]

Yeah, looks like we are behind on updating the binary. I will get an update submitted to the Netgate team. May take a day or two to get it through the review process, though.

[fireodo]

@bmeeks said in Snort Update error 422:

I will get an update submitted to the Netgate team. May take a day or two to get it through the review process, though.

Thanks a lot, Bill!

Kind regards,
fireodo

[isewanus]

@bmeeks Thank you for your kind help!

[bmeeks]

I've posted a Snort package update for the Netgate/pfSense team to review and merge. Hopefully this happens in a day or two. The new Snort package version on pfSense will be 4.1.5 when it posts. It will contain the latest 2.9.19 snort binary.

[stephenw10]

I forked off the QUIC discussion from this.

[fireodo]

@stephenw10 said in Snort Update error 422:

I forked off the QUIC discussion from this.

Thanks!

[JonathanLee]

@fireodo Hello is there a new link for the forked discussion on QUIC or is that part deleted now? I am still new to Netgate community posts. Sorry we got a bit side tracked with topics on this one. QUIC is new and exciting for the world of firewall software.

[fireodo]

@jonathanlee said in Snort Update error 422:

is there a new link for the forked discussion on QUIC

https://forum.netgate.com/topic/168388/snort-quic-detection

[Chris.EQ]

We are having same issue on our 10 PFSense firewalls...
Tried to update the "Snort Oinkmaster Code" from www.snort.org with no luck.

[stephenw10]

Have you upgraded to pkg 4.1.5? It's available in 2.5.2 now.

[fireodo]

@stephenw10 said in Snort Update error 422:

Have you upgraded to pkg 4.1.5?

Yes, everything is fine now! Thanks to Bill!

[johnpitton]

The updated Snort pkg works on all 10 of my Netgate devices, some on 2.5.1 and some on 2.5.2.
Thanks

[JonathanLee]

@stephenw10

I do not see it available as of yet, is there a workaround to update this?

[fireodo]

@jonathanlee said in Snort Update error 422:

I do not see it available as of yet, is there a workaround to update this?

Do you have made an Update? (console 13) or GUI System-> Update?

[JonathanLee]

@fireodo

It says up to date.

[fireodo]

@jonathanlee said in Snort Update error 422:

It says up to date.

I dont know if this Snort package is also for the devel-branch!

[JonathanLee]

@fireodo

Ok I will have to wait I can not backdate with the GUI out of Development mode once you move to that its hard to go back.

They test updates every day with my hardware. Some crash some work good. Some update 2 times a day.

[jdeloach]

@jonathanlee
Click on System/Package Manager/Installed Packages, scroll down to Snort and see if it is shown in yellow (which means that update is available), scroll over to the right and click on the rectangle box with the arrows and click to reinstall the package.
Snort package will be reinstalled with the latest version.