Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort update coming soon – please read about an important change!

    Scheduled Pinned Locked Moved pfSense Packages
    142 Posts 33 Posters 53.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      @kilthro:

      The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found.

      As said above, it only works over IPv6.

      1 Reply Last reply Reply Quote 0
      • K
        kilthro
        last edited by

        @doktornotor:

        @kilthro:

        The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found.

        As said above, it only works over IPv6.

        Ahh missed that.. guess thats it then.. guess i need to dload the file here upload to the firewall at other location then install it via command line…

        1 Reply Last reply Reply Quote 0
        • F
          foresthus
          last edited by

          Hello,

          and what about this message trying to get the packeage via browser?

          404 Not Found

          files.pfsense.org has address 208.123.73.81
          files.pfsense.org has IPv6 address 2610:1c0:1:25::57

          I guess on your Webserver the content for ipv4 is not set correctly or the rights are different. Is the folder the same on your webserver for ipv4 and ipv6?

          :(

          1 Reply Last reply Reply Quote 0
          • C
            Cino
            last edited by

            Well I noticed the new snort package is ready to download. I gave it a shot and noticed 2 things:

            1: It wont allow me to have 2 sensors using the same interface anymore. I've had 2 WAN Sensors (1 for blocking and another for testing/alerting new rules)
            2: My WAN interface wont start:

            
Apr 8 09:10:30 	php: /snort/snort_interfaces.php: The command '/usr/local/bin/snort -R 60770 -D -q -l /var/log/snort/snort_em360770 --pid-path /var/run --nolock-pidfile -G 60770 -c /usr/pbi/snort-i386/etc/snort/snort_60770_em3/snort.conf -i em3' returned exit code '1', the output was ''
Apr 8 09:10:30 	snort[34127]: FATAL ERROR: /usr/pbi/snort-i386/etc/snort/snort_60770_em3/rules/snort.rules(7703) : pcre compile of "(obj.data|\object.data).+file\x3A\x2F\x2F127\x2E[0-9]" failed at offset 11 : missing opening brace after \o

            Before upgrade I did an uninstall then removed every snort reference on the filesystem, "find /* | grep -i snort | xargs rm -rv"

            1 Reply Last reply Reply Quote 0
            • F
              foresthus
              last edited by

              @doktornotor:

              @kilthro:

              The strange thing is that if I click the links here at the office, the file downloads. If I access from home via my pc or pfsense it cant be found.

              As said above, it only works over IPv6.

              What about the folks without ipv6?

              1 Reply Last reply Reply Quote 0
              • C
                CS
                last edited by

                IPv4 here and still waiting to see the package here: http://files.pfsense.org/packages/8/All/
                Any news???  :(

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  @/CS:

                  Any news???  :(

                  Any news would need to come from the developers/people with access to the HW. Frankly, pretty much everything that could go wrong did go wrong with all those migrations, even the 2.1.1 release got messed up. Dunno what's up with the guys lately.  :(

                  1 Reply Last reply Reply Quote 0
                  • BBcan177B
                    BBcan177 Moderator
                    last edited by

                    Bill is also away on Holidays so don't expect a reply from him until he's back.
                    Hopefully someone at ESF fixes the issue.

                    :o  Insanity is doing the same thing over and over expecting different results!  :o

                    "Experience is something you don't get until just after you need it."

                    Website: http://pfBlockerNG.com
                    Twitter: @BBcan177  #pfBlockerNG
                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                    1 Reply Last reply Reply Quote 0
                    • P
                      Pummel
                      last edited by

                      Someone needs to fix this stat! I didn't even know that 2.9.6.0 v3.0.5 was brand new. I don't check my packages for updates very often. I updated and now have no Snort. How can I revert to 2.9.5.6 v3.0.4?

                      1 Reply Last reply Reply Quote 0
                      • F
                        fragged
                        last edited by

                        @Pummel:

                        Someone needs to fix this stat! I didn't even know that 2.9.6.0 v3.0.5 was brand new. I don't check my packages for updates very often. I updated and now have no Snort. How can I revert to 2.9.5.6 v3.0.4?

                        You can't unless you have a local backup of it.

                        1 Reply Last reply Reply Quote 0
                        • C
                          chrissl
                          last edited by

                          Is there any how-to, how i can install a package manually ?

                          Because we can download the older versions but Not via Package-Installer.

                          1 Reply Last reply Reply Quote 0
                          • C
                            cjbujold
                            last edited by

                            Tried doing the update, got error trying to re-install and still getting error.

                            How can we fix?

                            Thanks

                            Beginning package installation for snort .
                            Downloading package configuration file… done.
                            Saving updated package information... done.
                            Downloading snort and its dependencies...
                            Checking for package installation...
                            Downloading https://files.pfsense.org/packages/amd64/8/All/snort-2.9.6.0-amd64.pbi ...  could not download from there or http://files.pfsense.org/packages/amd64/8/All//snort-2.9.6.0-amd64.pbi.
                            of snort-2.9.6.0-amd64 failed!

                            Installation aborted.Removing package...
                            Starting package deletion for snort-2.9.6.0-amd64...done.
                            Removing snort components...
                            Menu items... done.
                            Services... done.
                            Loading package instructions...
                            Include file snort.inc could not be found for inclusion.
                            Deinstall commands...
                            Not executing custom deinstall hook because an include is missing.
                            Removing package instructions...done.
                            Auxiliary files... done.
                            Package XML... done.
                            Configuration... done.
                            done.
                            Failed to install package.

                            Installation halted.

                            1 Reply Last reply Reply Quote 0
                            • C
                              chrissl
                              last edited by

                              Should work now.

                              Package is available amd64

                              Edit:

                              sorry.. I'n in a ipv6 network at the moment and can see it -.-'

                              1 Reply Last reply Reply Quote 0
                              • P
                                Pummel
                                last edited by

                                i386 file is still missing and I still cannot get amd64. People using IPv6 seem to be able to access it though.

                                1 Reply Last reply Reply Quote 0
                                • C
                                  chrissl
                                  last edited by

                                  here i have uploaded the amd64 version.

                                  But i have no idea how i/you can install it manually :(

                                  snort-2.9.6.0-amd64.zip

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    iccws
                                    last edited by

                                    @chrissl:

                                    here i have uploaded the amd64 version.

                                    But i have no idea how i/you can install it manually :(

                                    snort-2.9.6.0-amd64.zip

                                    pkg_add

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      drew134
                                      last edited by

                                      I tried downloading the correct pbi file using an IPV6 proxy: http://www.ipv6proxy.net/go.php?u=https%3A%2F%2Ffiles.pfsense.org%2Fpackages%2F8%2FAll%2F&b=0&f=norefer

                                      I can get the file, uploaded to my own hosting service and tried a pkg_add -r in the command prompt and got the following error.

                                      tar: Failed to set default locale
                                      pkg_add: unable to open table of contents file '+CONTENTS' - not a package?

                                      So there's that… just in case anyone knows any more than I know to try.

                                      1 Reply Last reply Reply Quote 0
                                      • P
                                        Pummel
                                        last edited by

                                        @drew134:

                                        I tried downloading the correct pbi file using an IPV6 proxy: http://www.ipv6proxy.net/go.php?u=https%3A%2F%2Ffiles.pfsense.org%2Fpackages%2F8%2FAll%2F&b=0&f=norefer

                                        I can get the file, uploaded to my own hosting service and tried a pkg_add -r in the command prompt and got the following error.

                                        tar: Failed to set default locale
                                        pkg_add: unable to open table of contents file '+CONTENTS' - not a package?

                                        So there's that… just in case anyone knows any more than I know to try.

                                        Do you have the i386 or amd64 version of pfSense installed? that link points to i386 use http://www.ipv6proxy.net/go.php?u=https%3A%2F%2Ffiles.pfsense.org%2Fpackages%2Famd64%2F8%2FAll%2F&b=1 to get amd64

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          drew134
                                          last edited by

                                          @Pummel:

                                          @drew134:

                                          I tried downloading the correct pbi file using an IPV6 proxy: http://www.ipv6proxy.net/go.php?u=https%3A%2F%2Ffiles.pfsense.org%2Fpackages%2F8%2FAll%2F&b=0&f=norefer

                                          I can get the file, uploaded to my own hosting service and tried a pkg_add -r in the command prompt and got the following error.

                                          tar: Failed to set default locale
                                          pkg_add: unable to open table of contents file '+CONTENTS' - not a package?

                                          So there's that… just in case anyone knows any more than I know to try.

                                          Do you have the i386 or amd64 version of pfSense installed? that link points to i386 use http://www.ipv6proxy.net/go.php?u=https%3A%2F%2Ffiles.pfsense.org%2Fpackages%2Famd64%2F8%2FAll%2F&b=1 to get amd64

                                          I actually have the i386 version. Thank you for noticing and adding that.

                                          1 Reply Last reply Reply Quote 0
                                          • J
                                            JStyleG7X
                                            last edited by

                                            I've made TinyURL links from the ipv6proxy page you listed, my pfSense box seemed to like that better.

                                            I'm not an expert at installing these but from what I read the process should be as follows (please correct any mistakes)…

                                            1.) SSH into your pfSense box
                                            2.) Choose option 8
                                            3.) I believe you need to run the .pbi i386/amd64 link - copy and paste the correct link that corresponds to your system.

                                            pkg_add -r http://tinyurl.com/ipv6-pfsense-i386/snort-2.9.6.0-i386.pbi
                                            pkg_add -r http://tinyurl.com/ipv6-pfsense-i386/snort-2.9.6.0.tbz

                                            pkg_add -r http://tinyurl.com/ipv6-pfsense-amd64/snort-2.9.6.0-amd64.pbi
                                            pkg_add -r http://tinyurl.com/ipv6-pfsense-amd64/snort-2.9.6.0.tbz

                                            4.) Type "rehash" and press enter
                                            5.) Type "snort-2.9.6.0-amd64 -i" or "snort-2.9.6.0-i386 -i"

                                            I based these instructions of of the following page, https://doc.pfsense.org/index.php/Installing_FreeBSD_Packages

                                            UPDATE

                                            It seems the links above might not work as I thought, the slash and file name are not being read correctly when it attempts to download, I did however recreate the links directly to the files.....but then the problem I had with this was the dependencies did not download correctly.

                                            These are links to download the files directly from the working ipv6 mirror.

                                            http://tinyurl.com/pfsensesnort-2-9-6-0-amd64-pbi
                                            http://tinyurl.com/pfsensesnort-2-9-6-0-amd64-tbz

                                            http://tinyurl.com/pfsense-snort-2-9-6-0-i386-pbi
                                            http://tinyurl.com/pfsense-snort-2-9-6-0-i386-tbz

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.