Packages were uninstalled?
-
I woke up this morning and noticed that two packages I had previously installed were missing from my services. One of those packages was snort, and the other was ssh. I am wondering if this is some sort of a bug or a security problem. Any information would be helpful.
Thanks
Eckman -
Here is the system log file.
Feb 7 03:33:56 php: : XML error: not well-formed (invalid token) at line 1
Feb 7 03:33:48 php: : Beginning package installation for .
Feb 7 03:33:48 php: : cd /var/db/pkg && pkg_delete ls | grep 0
Feb 7 03:33:47 php: : cd /var/db/pkg && pkg_delete ls | grep sshterm
Feb 7 03:33:47 php: : cd /var/db/pkg && pkg_delete ls | grep
Feb 7 03:33:45 php: : Beginning package installation for .
Feb 7 03:33:44 php: : Could not find snort_advanced.xml … Reinstalling package.
Feb 7 03:33:44 php: : New alert found: The snort package is missing required dependencies and must be reinstalled.
Feb 7 03:33:37 php: : Beginning package installation for .
Feb 7 03:33:36 php: : cd /var/db/pkg && pkg_delete ls | grep 0
Feb 7 03:33:18 php: : cd /var/db/pkg && pkg_delete ls | grep snort
Feb 7 03:33:18 php: : cd /var/db/pkg && pkg_delete ls | grep
Feb 7 03:33:16 SnortStartup[78986]: Ram free BEFORE starting Snort: 298M – Ram free AFTER starting Snort: 298M -- Mode lowmem -- Snort memory usage:
Feb 7 03:32:56 SnortStartup[78930]: Ram free BEFORE starting Snort: 298M – Ram free AFTER starting Snort: 298M -- Mode lowmem -- Snort memory usage: -
where you box rebootet?, if so i have also noticed that snort get´s uninstalled upon reboot
/f
-
Unless it had a BSOD, and I wasn't there to see it I didn't reboot it. I noticed that snort, and ssh were removed in the morning. I am hoping this is a bug and not a vulnerability related issue.
Thanks
Glenn -
i had exactly the same problem: snort was automatically uninstalled
Apr 1 14:14:57 php: : XML error: not well-formed (invalid token) at line 1
Apr 1 14:14:57 php: : Beginning package installation for .
Apr 1 14:14:56 php: : cd /var/db/pkg && pkg_delete ls | grep 0
Apr 1 14:14:56 php: : XML error: not well-formed (invalid token) at line 1
Apr 1 14:14:56 php: : cd /var/db/pkg && pkg_delete ls | grep
Apr 1 14:14:56 php: : cd /var/db/pkg && pkg_delete ls | grep
Apr 1 14:14:56 php: : XML error: not well-formed (invalid token) at line 1
Apr 1 14:14:54 php: : XML error: not well-formed (invalid token) at line 1
Apr 1 14:14:54 php: : Beginning package installation for .
Apr 1 14:14:54 php: : Could not find snort_advanced.xml … Reinstalling package.
Apr 1 14:14:54 php: : New alert found: The snort package is missing required dependencies and must be reinstalled.
Apr 1 14:14:52 php: : XML error: not well-formed (invalid token) at line 1
Apr 1 14:14:52 php: : Beginning package installation for .
Apr 1 14:14:51 php: : cd /var/db/pkg && pkg_delete ls | grep 0
Apr 1 14:14:38 php: : cd /var/db/pkg && pkg_delete ls | grep snort
Apr 1 14:14:37 php: : cd /var/db/pkg && pkg_delete ls | grep
Apr 1 14:14:33 SnortStartup[1021]: Ram free BEFORE starting Snort: 941M – Ram free AFTER starting Snort: 941M -- Mode ac-sparsebands -- Snort memory usage: -
Same with me. After I had reinstalled the latest squid package, snort was gone and I had to reinstall the whole pfsense machine.
Very strange… But, I am happy that I am not the only one who had this issue.
-
Hello,
I also experienced the same problem. But a more strange thing related to this issue is, when I reinstalled snort package, I noticed that my previous oinkmaster code has not been changed.
-
Snort has some kind of problem that it uninstalls itself at reboot, I'm not sure if it's a problem with the package system or the snort package itself, one or the other has some sort of bug.
It will retain the configuration.