Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Solved] Snort 4.1.6_13 crashing on pppoe interface randomly

    Scheduled Pinned Locked Moved
    IDS/IPS
    3
    3
    305
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • fireodoF
      fireodo
      last edited by fireodo

      Since update to Snort 4.1.6_13 (and new underlying binary) it is crashing with signal 11 on pppoe interface with no reason (no update or anything else) :-(

      Temporary solution in this Thread:

      https://forum.netgate.com/topic/184102/snort-promiscuous-mode-disabled-promiscuous-mode-enabled-error-exited-on-signal-11-core-dumped/11

      Disabling the KILL STATES Feature in the Interfaces settings resolves (temporary) the problem.

      UPDATE 21.11.23 - Solved in Snort version 4.1.6_14

      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
      pfsense 2.7.2 CE
      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

      1 Reply Last reply Reply Quote 1
      • LuketaL
        Luketa
        last edited by

        I have the same problem, I followed the temporary solution tutorial, let's see.

        thanks

        1 Reply Last reply Reply Quote 0
        • bmeeksB
          bmeeks
          last edited by bmeeks

          I think I may have found the bug. If I am correct, it's actually in the FreeBSD libpfctl library and not directly in the Snort code. I'm waiting on the Netgate kernel developer I'm working with to either confirm my finding or show me where I went off track ☺.

          1 Reply Last reply Reply Quote 2
          • First post
            Last post