• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Snort Won't Start After Upgrade

Scheduled Pinned Locked Moved pfSense Packages
301 Posts 64 Posters 213.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • E
    eri--
    last edited by Nov 1, 2011, 7:57 AM

    Thanks Cino for the usual help.

    The alert mostly works when it does not work its mostly because of snort reloading or php doing something stupid though i have not investigated which is that does this.

    1 Reply Last reply Reply Quote 0
    • C
      Cino
      last edited by Nov 1, 2011, 4:07 PM

      Anytime!

      Looks like someone figured out a fix for clearing the alert log. Take a look when you have time, http://redmine.pfsense.org/issues/1765

      1 Reply Last reply Reply Quote 0
      • E
        eri--
        last edited by Nov 1, 2011, 4:38 PM

        I just pushed the fixes for the alert.
        Test it out.

        1 Reply Last reply Reply Quote 0
        • C
          Cino
          last edited by Nov 1, 2011, 6:04 PM

          tested and confirm it is working.. Thanks again

          1 Reply Last reply Reply Quote 0
          • B
            bdwyer
            last edited by Nov 2, 2011, 12:28 AM

            How did you manage to update Snort with that fix?  Is it in a new ISO or must I place the new snort_alerts.php there manually?

            CCNP, MCITP

            Intel Atom N550 - 2gb DDR3
            Jetway NC9C-550-LF
            Antec ISK 300-150
            HP ProCurve 1810-24
            Cisco 1841 & 2821, Cisco 3550 x3

            1 Reply Last reply Reply Quote 0
            • M
              marcelloc
              last edited by Nov 2, 2011, 2:52 AM Nov 2, 2011, 1:05 AM

              @bdwyer:

              How did you manage to update Snort with that fix?  Is it in a new ISO or must I place the new snort_alerts.php there manually?

              Basically, when you see updates in forum and no change in package version, just reinstall(in this case snort package) to get latest files version.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • B
                bdwyer
                last edited by Nov 2, 2011, 1:13 AM

                Yes, I think that worked.  Thanks for filling me in.

                CCNP, MCITP

                Intel Atom N550 - 2gb DDR3
                Jetway NC9C-550-LF
                Antec ISK 300-150
                HP ProCurve 1810-24
                Cisco 1841 & 2821, Cisco 3550 x3

                1 Reply Last reply Reply Quote 0
                • X
                  xieliwei
                  last edited by Nov 22, 2011, 10:01 PM

                  Sorry for reviving an old thread, but I've been having the Unknown output plugin: "alert_pf" problem on my AMD64 pfSense 2.0 install.

                  I originally thought it could be a package problem; but after a few updates and apparently no one else has this problem anymore, I suspect I'm missing something.

                  Can anyone clarify if "Block offenders" is working on AMD64?

                  If so, any clues about why mine doesn't work?

                  1 Reply Last reply Reply Quote 0
                  • M
                    marcelloc
                    last edited by Nov 22, 2011, 10:03 PM

                    did you tried to uninstall / reinstall snort package?

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • X
                      xieliwei
                      last edited by Nov 22, 2011, 10:32 PM

                      Yes, every single time.
                      Just in case, I did it again. No luck.

                      Pretty sure my messing around caused this, anyone knows which library contains the alert_pf plugin?

                      1 Reply Last reply Reply Quote 0
                      • M
                        marcelloc
                        last edited by Nov 22, 2011, 11:17 PM

                        Try to uninstall again, then go ti console and remove any snort package or dependencie left behind.
                        I think some post on this topic has a detailed info about this.

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • C
                          cmb
                          last edited by Jan 2, 2012, 10:50 PM

                          Locking this thread so it won't get hijacked over and over by numerous different issues, please start new threads instead.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                            [[user:consent.lead]]
                            [[user:consent.not_received]]