Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort "double logging" to pfSense logs

    Scheduled Pinned Locked Moved pfSense Packages
    2 Posts 2 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bmeeksB
      bmeeks
      last edited by

      I'm running Snort 2.8.6 pkg 1.27 on pfSense 1.2.3-RELEASE.  For the last couple versions maybe of the package I've noticed that Snort is printing its messages to the pfSense log twice each.  That is, each message or alert from Snort is logged twice in succession in the pfSense system log with the exact same timestamps.  Is this normal?  I don't remember for sure, but I don't think this happened when I first loaded the Snort package earlier this year.

      1 Reply Last reply Reply Quote 0
      • J
        jamesdean
        last edited by

        Its normal, I's an old bug. Its not snort, its something with the logging configuration in Pfsense.
        I'll fix it in latter versions.

        James

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.