Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fatal error in Snort version 2.9.2.3 pkg v. 2.5.1

    Scheduled Pinned Locked Moved pfSense Packages
    19 Posts 5 Posters 4.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      trvsecurity
      last edited by

      32 bit

      Now I keep getting:

      php: /snort/snort_download_rules.php: Snort rules file downloaded failed…

      1 Reply Last reply Reply Quote 0
      • F
        Fesoj
        last edited by

        I don't have any problem downloading the Snort.org and ET rules and installing them.

        Maybe, you should remove the snort package. Find residual files and dirs with find / -name 'snort*', delete them, maybe reboot the machine, and finally install snort again.

        1 Reply Last reply Reply Quote 0
        • E
          eri--
          last edited by

          @trvsecurity:

          32 bit

          Now I keep getting:

          php: /snort/snort_download_rules.php: Snort rules file downloaded failed…

          You have to wait 15 minutes and then try again.

          1 Reply Last reply Reply Quote 0
          • T
            trvsecurity
            last edited by

            I uninstalled and rebooted and all the ETC files had gone.  I cannot delete all Snort files as I need the back up config to come back after reinstall.  Still cannot download Snort rules.

            Can you tell me what directories I should delete after uninstall while maintaning the config back up?

            1 Reply Last reply Reply Quote 0
            • J
              judex
              last edited by

              You can savely remove all snort files. The config is saved in XML.

              2.1-RELEASE (amd64)
              built on Wed Sep 11 18:17:48 EDT 2013
              FreeBSD 8.3-RELEASE-p11

              1 Reply Last reply Reply Quote 0
              • T
                trvsecurity
                last edited by

                Done.  When I uninstall, all the files in /usr/local/etc/snort/ go away. Then I reinstall and I still can't download the Snort rules.

                I have never had this issue before.

                In the logs, I see:

                php: /snort/snort_download_rules.php: There is a new set of Snort.org rules posted. Downloading…

                Then 3 seconds later:

                php: /snort/snort_download_rules.php: Snort rules file downloaded failed...

                1 Reply Last reply Reply Quote 0
                • F
                  Fesoj
                  last edited by

                  trvsecurity ,

                  I am just guessing. Is your oinkcode ok?

                  1 Reply Last reply Reply Quote 0
                  • T
                    trvsecurity
                    last edited by

                    yes - definitely not the cause.  Just put it in again, and the problem continues.

                    1 Reply Last reply Reply Quote 0
                    • F
                      Fesoj
                      last edited by

                      Next idea: do you have a virtual machine to play with? Setting this up using VirtualBox takes less than an hour.

                      1 Reply Last reply Reply Quote 0
                      • E
                        eri--
                        last edited by

                        @trvsecurity:

                        yes - definitely not the cause.  Just put it in again, and the problem continues.

                        Maybe they put you on blacklist.
                        It gets cleared in 1/2 hours.

                        Though reinstall teh package i put code to remove the dynamic rules in case they are not enabled in categories tab.

                        1 Reply Last reply Reply Quote 0
                        • T
                          trvsecurity
                          last edited by

                          I think you are right! I left it for a while and now everything is working fine! Thaks to ALL! Case closed!

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.