Large 1.7 G "snort.core"

wolfsden3

Why might I have a 1.7 GB file called "snort.core" on my PFSense? What is this and can I delete it?

-rw-------   1 root wheel  1.7G Dec  7 13:37 snort.core
-rw-------   1 root wheel  380K Dec 10 15:33 sort.core

Here's the full list...

find . -type f -size +20M -exec du -h {} \; | sort -h
576K	./boot/boot1.efifat
576K	./boot/gptboot.efifat
 21M	./usr/local/sbin/pfSense-repoc-static
 22M	./var/cache/pkg/openvpn-client-export-2.6.7~da75b0ae19.pkg
 26M	./usr/local/etc/snort/snort_14489_igb1/rules/snort.rules
 28M	./usr/local/lib/python3.11/config-3.11/libpython3.11.a
 28M	./var/unbound/usr/local/lib/python3.11/config-3.11/libpython3.11.a
 31M	./usr/local/sbin/pkg-static.pkgsave
 31M	./usr/local/share/icu/73.2/icudt73l.dat
 32M	./.sujournal
 32M	./usr/local/sbin/pkg-static
 34M	./var/cache/pkg/python311-3.11.6~b58b7a56fa.pkg
 35M	./var/db/aliastables/pfB_TorBlock_v4.txt
 35M	./var/db/pfblockerng/deny/TORBLOCKER_v4.txt
 35M	./var/db/pfblockerng/original/TORBLOCKER_v4.orig
 48M	./boot/kernel.old/.pkgtemp.kernel.zXhjTfeClnJS
 48M	./boot/kernel.old/kernel
 48M	./boot/kernel/kernel
139M	./var/cache/pkg/pfSense-base-2.7.2~0135c9e036.pkg
144M	./usr/local/share/pfSense/base.txz
1.4G	./root/snort.core

My disk is 71% full and I was looking to clean things up. I'm not terribly worried but if I could remove a thing or two that would be fine :-)

Thanks

bmeeks

Yes, that snort.core file can safely be deleted. That is a memory dump produced by a crash (looks like back on December 7th).