Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.0.1-RELEASE (amd64) snort version 2.9.2.3 pkg v. 2.2.1 **Fix**

    Scheduled Pinned Locked Moved pfSense Packages
    7 Posts 4 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mschiek01
      last edited by

      Run the following commands from the command line.

      pkg_add -f http://files.pfsense.org/packages/8/All/libdnet-1.11_3.tbz
      pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1.tbz
      pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1_1.tbz
      pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.2.1.tbz
      pkg_add -f http://files.pfsense.org/packages/8/All/daq-0.5_1.tbz
      pkg_add -f http://files.pfsense.org/packages/8/All/snort-2.9.2.3.tbz

      These commands will replace the files that are missing on install/reinstall

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        @mschiek01:

        Run the following commands from the command line.

        pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1.tbz
        pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1_1.tbz
        pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.2.1.tbz

        These commands will replace the files that are missing on install/reinstall

        Sure it needs three versions of the libpcap to work? ???

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • M
          mschiek01
          last edited by

          @marcelloc:

          @mschiek01:

          Run the following commands from the command line.

          pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1.tbz
          pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1_1.tbz
          pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.2.1.tbz

          These commands will replace the files that are missing on install/reinstall

          I added all three but I think it will work with just 1.1.1.tbz

          Sure it needs three versions of the libpcap to work? ???

          1 Reply Last reply Reply Quote 0
          • C
            chowtamah
            last edited by

            'Fix' works in command prompt -

            
        --== Initialization Complete ==--

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.2.3 IPv6 GRE (Build 205) FreeBSD
   ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2012 Sourcefire, Inc., et al.
           Using libpcap version 1.2.1
           Using PCRE version: 8.30 2012-02-04
           Using ZLIB version: 1.2.3

Commencing packet processing (pid=57322)

            But, from Snort GUI, I get this error..

            
Jun 19 09:32:06	SnortStartup[4791]: Interface Rule START for 0_40330_em1...
Jun 19 09:32:06	snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device
Jun 19 09:32:06	snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device
Jun 19 09:32:06	snort[4546]: Log directory = /var/log/snort/snort_em140330
Jun 19 09:32:06	snort[4546]: Log directory = /var/log/snort/snort_em140330
Jun 19 09:32:06	snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor
Jun 19 09:32:06	snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor

            2.0.2-RELEASE (amd64)  &  2.2.2-RELEASE (amd64)

            Always trying to learn!!

            1 Reply Last reply Reply Quote 0
            • D
              digdug3
              last edited by

              Just wait for the dev to finish, or help him:

              http://forum.pfsense.org/index.php/topic,50416.0.html

              1 Reply Last reply Reply Quote 0
              • M
                mschiek01
                last edited by

                @chowtamah:

                'Fix' works in command prompt -

                
        --== Initialization Complete ==--

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.2.3 IPv6 GRE (Build 205) FreeBSD
   ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2012 Sourcefire, Inc., et al.
           Using libpcap version 1.2.1
           Using PCRE version: 8.30 2012-02-04
           Using ZLIB version: 1.2.3

Commencing packet processing (pid=57322)

                But, from Snort GUI, I get this error..

                
Jun 19 09:32:06	SnortStartup[4791]: Interface Rule START for 0_40330_em1...
Jun 19 09:32:06	snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device
Jun 19 09:32:06	snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device
Jun 19 09:32:06	snort[4546]: Log directory = /var/log/snort/snort_em140330
Jun 19 09:32:06	snort[4546]: Log directory = /var/log/snort/snort_em140330
Jun 19 09:32:06	snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor
Jun 19 09:32:06	snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor

                Services/snort/snort interfaces

                To the right of the page Click on edit interface

                Scroll to the bottom of the page

                "Arguments here will be automatically inserted into the snort configuration"
                "Advanced configuration pass through"

                Delete anything that is in the box.

                Click save

                Again click edit interface and scroll to the bottom. Make sure the box still has nothing in it.  If it does again delete anything there, then while your still in the text box hit the space bar then click save

                Start snort.

                1 Reply Last reply Reply Quote 0
                • C
                  chowtamah
                  last edited by

                  ;D Thanks to - mschiek01 and to Feadin

                  After removing snort and all its linked file, I restarted the firewall, installed Snort 2.9.2.3 pkg v. 2.2.1 and,
                  now it is running.

                  Thanks also to Jimp and Jamesdean.

                  Now I am looking at Feadin posts: http://forum.pfsense.org/index.php/topic,50643.0.html

                  2.0.2-RELEASE (amd64)  &  2.2.2-RELEASE (amd64)

                  Always trying to learn!!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.