Snort 2.9.2.3 pkg v. 2.5.4 Issues
-
A change was made in the code that builds the $HOME_NET variable to include the LAN subnet. It was not formerly included. Ermal made the tweak a few days ago. Apparently it has problems on some installations. Mine works fine, but others have posted with some issues.
It appears the function that is supposed to return the subnet mask length sometimes returns an empty string. Hopefully Ermal can take a look in the next day or so.
-
thanks bmeeks! It properly creates the $HOME_NET variable for my WAN interface (I have 2 sensors, 1 for blocking and another for alerting/testing) and an OPT interface (VLAN).
-
Cino you are on 2.1?
If yes, just upgrade to a more recent snapshot where some fixes have been done related to that.
Probably those are ipv6 addresses. -
@ermal:
Cino you are on 2.1?
If yes, just upgrade to a more recent snapshot where some fixes have been done related to that.
Probably those are ipv6 addresses.I'm on 2.1.. I did do a sync this morning with the same results… Last firmware was Jan 24th, were these fixes binary related and/or code?
-
I noticed that the package is showing that there's an updated version on the installed packages screen but doesn't show up as available in the services status dashboard widget like previous updates had. Does this mean that the updated Snort package isn't yet stable?
-
@ermal:
Cino you are on 2.1?
If yes, just upgrade to a more recent snapshot where some fixes have been done related to that.
Probably those are ipv6 addresses.Completed a full update on my 2.1 box and my LAN still doesn't up…
same error as before where the lan subnet is not being formatted correctly.. btw my lan does have ipv4 and ipv6 address
-
Should be fixed just reinstall.
-
lan sensor still wont start. noticed my ipv6 address are no longer in the HOME_NET variable
[127.0.0.1,192.168.0.1,/,x.x.x.x/22…....
-
I pushed another small fix.
You are sure that the latest fixes have been installed? -
i did a deinstall and reinstall… life is good... both ipv4 and ipv6 addresses are there now.. thank you again for all your hard work on this package!!!
