Snort update coming soon – please read about an important change!

doktornotor


$ host files.pfsense.org
files.pfsense.org has address 208.123.73.81
files.pfsense.org has IPv6 address 2610:1c0:1:25::57

LC74

Still nothing here, even browsing at the I.P. address you pointed out… :(

@doktornotor:


$ host files.pfsense.org
files.pfsense.org has address 208.123.73.81
files.pfsense.org has IPv6 address 2610:1c0:1:25::57

pkg_list_IP.png_thumb

chrissl

@doktornotor:


$ host files.pfsense.org
files.pfsense.org has address 208.123.73.81
files.pfsense.org has IPv6 address 2610:1c0:1:25::57

definitly not there or we cant see it

Unbenannt.PNG_thumb

DickB

I just checked for the i386 package that I need. On the IPv6 site it is available but NOT on the IPv4 site (yet I hope).

kilthro

The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found. Tested via ipad from a wifi hotspot and it failed… so not sure why the links work here at the office. If I browse the directory I can see it from here as well. Try that from home or from ipad do not see it at all..

doktornotor

@kilthro:

The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found.

As said above, it only works over IPv6.

kilthro

@doktornotor:

@kilthro:

The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found.

As said above, it only works over IPv6.

Ahh missed that.. guess thats it then.. guess i need to dload the file here upload to the firewall at other location then install it via command line…

foresthus

Hello,

and what about this message trying to get the packeage via browser?

404 Not Found

files.pfsense.org has address 208.123.73.81
files.pfsense.org has IPv6 address 2610:1c0:1:25::57

I guess on your Webserver the content for ipv4 is not set correctly or the rights are different. Is the folder the same on your webserver for ipv4 and ipv6?

:(

Cino

Well I noticed the new snort package is ready to download. I gave it a shot and noticed 2 things:

1: It wont allow me to have 2 sensors using the same interface anymore. I've had 2 WAN Sensors (1 for blocking and another for testing/alerting new rules)
2: My WAN interface wont start:


Apr 8 09:10:30 	php: /snort/snort_interfaces.php: The command '/usr/local/bin/snort -R 60770 -D -q -l /var/log/snort/snort_em360770 --pid-path /var/run --nolock-pidfile -G 60770 -c /usr/pbi/snort-i386/etc/snort/snort_60770_em3/snort.conf -i em3' returned exit code '1', the output was ''
Apr 8 09:10:30 	snort[34127]: FATAL ERROR: /usr/pbi/snort-i386/etc/snort/snort_60770_em3/rules/snort.rules(7703) : pcre compile of "(obj.data|\object.data).+file\x3A\x2F\x2F127\x2E[0-9]" failed at offset 11 : missing opening brace after \o

Before upgrade I did an uninstall then removed every snort reference on the filesystem, "find /* | grep -i snort | xargs rm -rv"

foresthus

@doktornotor:

@kilthro:

The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found.

As said above, it only works over IPv6.

What about the folks without ipv6?

CS

IPv4 here and still waiting to see the package here: http://files.pfsense.org/packages/8/All/
Any news??? :(

doktornotor

@/CS:

Any news??? :(

Any news would need to come from the developers/people with access to the HW. Frankly, pretty much everything that could go wrong did go wrong with all those migrations, even the 2.1.1 release got messed up. Dunno what's up with the guys lately. :(

BBcan177

Bill is also away on Holidays so don't expect a reply from him until he's back.
Hopefully someone at ESF fixes the issue.

:o Insanity is doing the same thing over and over expecting different results! :o

Pummel

Someone needs to fix this stat! I didn't even know that 2.9.6.0 v3.0.5 was brand new. I don't check my packages for updates very often. I updated and now have no Snort. How can I revert to 2.9.5.6 v3.0.4?

fragged

@Pummel:

Someone needs to fix this stat! I didn't even know that 2.9.6.0 v3.0.5 was brand new. I don't check my packages for updates very often. I updated and now have no Snort. How can I revert to 2.9.5.6 v3.0.4?

You can't unless you have a local backup of it.

chrissl

Is there any how-to, how i can install a package manually ?

Because we can download the older versions but Not via Package-Installer.

cjbujold

Tried doing the update, got error trying to re-install and still getting error.

How can we fix?

Thanks

Beginning package installation for snort .
Downloading package configuration file… done.
Saving updated package information... done.
Downloading snort and its dependencies...
Checking for package installation...
Downloading https://files.pfsense.org/packages/amd64/8/All/snort-2.9.6.0-amd64.pbi ... could not download from there or http://files.pfsense.org/packages/amd64/8/All//snort-2.9.6.0-amd64.pbi.
of snort-2.9.6.0-amd64 failed!

Installation aborted.Removing package...
Starting package deletion for snort-2.9.6.0-amd64...done.
Removing snort components...
Menu items... done.
Services... done.
Loading package instructions...
Include file snort.inc could not be found for inclusion.
Deinstall commands...
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
done.
Failed to install package.

Installation halted.

chrissl

Should work now.

Package is available amd64

Edit:

sorry.. I'n in a ipv6 network at the moment and can see it -.-'

Pummel

i386 file is still missing and I still cannot get amd64. People using IPv6 seem to be able to access it though.

chrissl

here i have uploaded the amd64 version.

But i have no idea how i/you can install it manually :(

snort-2.9.6.0-amd64.zip