Snort problem

[Hugovsky]

2 boxes:

1-1.2.3-RC1
built on Sat May 30 22:26:25 EDT 2009.
snort package v.2.8.4
Doing ppoe with bridged router. Can't update rules and everytime ip changes, snort won't restart. Restart snort mannualy to work.

2-1.2.3-RC1
built on Tue May 12 00:32:03 EDT 2009
snort package v.2.8.4
behind router. working like a charm.
Can't update rules.

Your work IS GREATLY apreciatted by me. It's because of people like you that I learn something every day. I just hope some day I could do something to help the community, just like you.

BIG thanks for your work.

[serialdie]

James,

Do you have a pay pal link?
I wont mind sending you a donation for all your work!!!

Thanks!

[jamesdean]

Thanx serialdie, Hugovsky. Your type of peple I'm doing this for. Send mony to the pfsense core developers so they can buy me a mini-itx.

–------------------------------
Added today

Updates work again.
"when did I last download, time stamps info" (just started)

---

Adding latter today. If I have time.

Rules backup option. you will need 180 megs for this.
Alerts to system log. (Requested don't know why.)
Identify snort package version.
redo Update rules automatically option.
RSS feeds.

If there is any one here in the forums that is a Premium snort rules user, Please email me.

james

[lordarcane]

Hey!

Snort up and running again.

Running pfsense 1.2.2

ReInstalled snort package, downloaded the rules.
Had to save the rules before I could start snort, otherwise it said unable to load the rules.

Thanks for all the hard work!

[Hugovsky]

James, you're the man….

[serialdie]

@jamesdean:

Thanx serialdie, Hugovsky. Your type of peple I'm doing this for. Send mony to the pfsense core developers so they can buy me a mini-itx.

–------------------------------
Added today

Updates work again.
"when did I last download, time stamps info" (just started)

---

Adding latter today. If I have time.

Rules backup option. you will need 180 megs for this.
Alerts to system log. (Requested don't know why.)
RSS feeds.

If there is any one here in the forums that is a Premium snort rules user, Please email me.

james

James I am a premium user.

I will be emailing you today.

[serialdie]

James,

Please check your pm.

Also if you need hardware for development I have no problem getting you an Alix Board… Unless you really need a Mini-ITX than I can look in to the Mini-ITX form factor but I would prefer donating a Brand new Alix board to you. If interested please PM.
Somebody else can pitch in the rest of the hardware??

Take Care!

[jamesdean]

I have scripts that maonitor the nytimes, digg and twitter for news i like.
This just came up.

This is what Im talking about.

[serialdie]

jamesdean,

HAHAHAHA Nice!!!
Any info on the new update?
I am waiting on the PM so I can send you the board as promise.

Thank You!

[serialdie]

James,

Is
snort-2.8.4.1 the latest pkg you build?

Thats the pkg I am getting when I go under System: Package Manager: Install Package: Reinstall Package

[serialdie]

Ok thanks…

Right now I am not able to start Snort at all after the update... Since the update is broken it does not want to start....

By the way enjoy your new board. Ailx Boards are awesome and they get the job done. Hopefully it fits well for your snort coding.

[serialdie]

As non subscriber I get:

The downloaded file does not match the md5 file…

Error md5 Mismatch...

[serialdie]

Yes.
I reply.

Please check your PM

[serialdie]

James,

Any updates? :)

[serialdie]

SWWWWEEETTT!!!!  ;D ;D ;D 8) 8) 8)
I am glad that I was of help!
I am so anxious for this update I am not even sleepy!
Man and I have to be at work @ 4AM LOL

[jamesdean]

Thanx for your help imagine if I had to do this by guessing urls.
Get some sleep every time I change something I have to wait 15 min.

No worries…

Patience it code will be up.

Update, code changes work.
Finnal step is to make shure nothing gets broken.

[serialdie]

@jamesdean:

Update, code changes work.
Finnal step is to make shure nothing gets broken.

Cool!

[serialdie]

James,

I got you PM's… If there anything I can do to help please let me know!

[serialdie]

Update:

I just re install the package and as a premium user I was able to update with no problems… Is right now extracting the files.

Update:

I still have the issue where it hangs when copying the signatures. Looks like the pkg got reverted to the previous one?
After a reboot the snorts starts ok and starts working again. :)

[serialdie]

As requested here is my system info.

ALIX.2C3 System Board with

• 500 MHz AMD Geode LX800 CPU
• 3 10/100 Ethernet ports (VIA VT6105M 10/100)
• 1 miniPCI slot for future expansion (VPN Acceleration, wireless, etc.)
• 2 USB ports
• 256 MB DDR DRAM
  4GB Microdrive with pfSense 1.2.3-RC1
  802.11a/b/g WLM54SAG mPCI card, 2 cables & 2 dual band antenna