Snort problem
-
-
James,
I got you PM's… If there anything I can do to help please let me know!
-
Update:
I just re install the package and as a premium user I was able to update with no problems… Is right now extracting the files.
Update:
I still have the issue where it hangs when copying the signatures. Looks like the pkg got reverted to the previous one?
After a reboot the snorts starts ok and starts working again. :) -
As requested here is my system info.
ALIX.2C3 System Board with
- 500 MHz AMD Geode LX800 CPU
- 3 10/100 Ethernet ports (VIA VT6105M 10/100)
- 1 miniPCI slot for future expansion (VPN Acceleration, wireless, etc.)
- 2 USB ports
- 256 MB DDR DRAM
4GB Microdrive with pfSense 1.2.3-RC1
802.11a/b/g WLM54SAG mPCI card, 2 cables & 2 dual band antenna
-
As requested here is my system info.
ALIX.2C3 System Board with
- 500 MHz AMD Geode LX800 CPU
- 3 10/100 Ethernet ports (VIA VT6105M 10/100)
- 1 miniPCI slot for future expansion (VPN Acceleration, wireless, etc.)
- 2 USB ports
- 256 MB DDR DRAM
4GB Microdrive with pfSense 1.2.3-RC1
802.11a/b/g WLM54SAG mPCI card, 2 cables & 2 dual band antenna
I reinstalled the package today to make shure every thing works. Nothing hung or failed.
The script is copying 15000 files so its going to take some time on your system spec.
Im going to try a "move" instead of a "copy" to reduce system load. If a move does not reduce the system load, Im going to make an option of the "signatures description files".Though I need those signature description files to be installed so I can add a tab that looks up the discription of alerts.
Thanks without your help I would never be able to resove thses final hang ups.
Dont try to install the package again im still adding features and I dont want to kill your flash card.
-
Got it!
Thank you very much for all your effort and help!
-
Good morning guys :)
Im not good on cli commands… I jus downloaded the snort rules.. How to extract them on the pfsense snort?jigpd
Davao City
1.2.2 -
jigpe: They extract automatically after you update the rules.
-
Updating the rules took like 9 hours 1st attempt, 2nd attempt was 7 hours and 3rd attempt to 3rd box is worst 11.5 more or less :( (speed 2mb up/dl). But at least it works now. Thanks :)
jigp
-
That's odd. I have 2 boxes and a 15/2 connection and can download and extract in under 10 minutes usually.
-
jigpe and ColdFusion
The downloading of rules should only take at most 5 min, there's something wrong.
Questions ?
What version of snort package are you using (snort or snort-dev) ?
What are you system spec's ?
Are you using traffic shaper ?
James
-
Mine downloads in under 1-2 minutes….and I generally hit Save after that....so many 5 minutes or so or less. I just threw out 10 minutes because the OP said his took hours....Basically, I don't have a problem.
Oh, Nice work BTW.....
Ok to answer you question...2 machines:
C3 via 600MHZ 1 gig ram Snort DEV traffic shaping yes
Semprom 3800 2 gig ram Snort DEV traffic shaping yes