Snort pf.conf => Table snort2c don't exists in packet filter: No such file or d

BBcan177

You can try to manually create the table from the shell :

pfctl -t snort2c -T add 1.1.1.1

Then you can either leave the "1.1.1.1" address or goto "Diagnostics:Tables" and delete that entry in the snort2c table.

finalcut

Thanks Man

But where all table gone ????????
i dont know how the tabele gone all of them in Diagnostics:Tables

BBcan177

I saw a thread a few weeks ago with the same issue… I can't say what caused the Table to delete... You may notice that something else is triggering the Deletion or maybe after a Reboot?

I don't remember seeing a real solution from the previous issue that I saw? Sorry...

Let us know if it happens again.. Do you see anything in the System Logs?

finalcut

OK Thats Great each time i reboot i loose my table in Diagnostic > table

finalcut

I remove the traficshaper and every thing went ok

bmeeks

@finalcut:

I remove the traficshaper and every thing went ok

I believe that issue (with the traffic shaper somehow deleting the <snort2c>table) has been reported elsewhere.

Bill</snort2c>

finalcut

but i still face this log
kernel: Bump flowset buckets to 256 (was 0)

Cino

@finalcut:

but i still face this log
kernel: Bump flowset buckets to 256 (was 0)

That is from Limter being enabled… Goto Traffic Shaper, Limter tab.. Click on first limter you created, Show Advance Options; change Bucket Size to 256. Do this to the rest of them and you shouldn't see that message anymore

finalcut

YOU ARE VERY TRUE

THANKS

gdsnytech

@Cino:

@finalcut:

but i still face this log
kernel: Bump flowset buckets to 256 (was 0)

That is from Limter being enabled… Goto Traffic Shaper, Limter tab.. Click on first limter you created, Show Advance Options; change Bucket Size to 256. Do this to the rest of them and you shouldn't see that message anymore

The limiter is not enabled. Any ideas?