php error with suricata after updating to 2.8

jc1976

Hello all,

I followed the recommendation of uninstalling all packages before updating from 2.7.2->2.8.

pfblocker seems to be fine but suricata has been giving me issues.

Today, I tried to do a simple reinstall of suricata and while it claims to have been installed successfully, the 'suricata' link under services isn't there, it's not showing up under 'service status' on my dashboard, and i keep getting php crashes.

the php error is as follows:

"PHP {$errortype}s

PHP ERROR: Type: 1, File: /usr/local/pkg/suricata/suricata.inc, Line: 2469, Message: Allowed memory size of 536870912 bytes exhausted (tried to allocate 12288 bytes) @ 2025-06-29 10:52:44"

I'd upload the log but when i tried i was told it was the wrong file format, which being it's a simple .txt file shouldn't be a problem.

thanks!

bmeeks

Part of the install/update process for the package rebuilds the enabled rules. It appears you do not have enough free PHP memory for that to complete. Because the rules rebuild is crashing, the install never completes because rebuilding rules is part of the install when an existing configuration is detected. Not completing the install results in the menu entry under SERVICES not being created (as that is the very last step of the installation process).

Try increasing the amount of PHP memory allocated by pfSense under the SYSTEM menu. Then remove the Suricata package and try the install again.

fireodo

@bmeeks said in php error with suricata after updating to 2.8:

Part of the install/update process for the package rebuilds the enabled rules.

Maybe to much rules too?

bmeeks

@fireodo said in php error with suricata after updating to 2.8:

@bmeeks said in php error with suricata after updating to 2.8:

Part of the install/update process for the package rebuilds the enabled rules.

Maybe to much rules too?

A possibility for sure, but the rules rebuild was apparently working under the previous pfSense version if I am understanding the OP correctly.

He also has pfBlockerNG installed and it will use a lot of PHP memory for some tasks.