Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort 3.2.9.1 not updating VRT ruleset

    Scheduled Pinned Locked Moved IDS/IPS
    4 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • nzkiwi68N
      nzkiwi68
      last edited by

      I'm a paid snort subscriber and pfsense snort 3.2.9.1 on pfsense 2.2.6 won't update the VRT ruleset, it just keeps saying it's up to date.

      Log excerpt:

      Starting rules update…  Time: 2016-02-02 08:12:12
      Downloading Snort VRT rules md5 file snortrules-snapshot-2976.tar.gz.md5...
      Checking Snort VRT rules md5 file...
      Snort VRT rules are up to date.
      Downloading Snort OpenAppID detectors md5 file snort-openappid.tar.gz.md5...
      Checking Snort OpenAppID detectors md5 file...
      Snort OpenAppID detectors are up to date.
      The Rules update has finished.  Time: 2016-02-02 08:12:14

      Yet, 2.9.8.0 is out.

      I re-generated my oink code. and 100% checked that I'm a paid subscriber.

      pfsense snort package fault or perhaps a fault with the snort end?

      Any ideas?

      1 Reply Last reply Reply Quote 0
      • R
        Ramosel
        last edited by

        @nzkiwi68:

        Yet, 2.9.8.0 is out.

        I re-generated my oink code. and 100% checked that I'm a paid subscriber.

        I think you are confusing the rules with the snort code itself.  Go to your "updates" tab and see when your "rules" last updated.

        Yes, Snort 2.9.8.0 is out but it will not update automatically.  Snort will be updated by package when Bill is finished.  Bear in mind most of the Devs are currently feverishly working on package updates for pfSense 2.3 so you may not see the 2.9.8.0 snort program update for a bit…  but its coming

        Rick

        1 Reply Last reply Reply Quote 0
        • bmeeksB
          bmeeks
          last edited by

          I am holding the update to the 2.9.8.0 version of the Snort binary while we are busy converting to Bootstrap for pfSense 2.3.  The Bootstrap conversion is close to being finished.  I wanted to freeze the binary version while the GUI changes for Bootstrap were being worked on.  As soon as the current Snort version is working in Bootstrap, then I will update the underlying binary to 2.9.8.0 or whatever is current at the time.

          Bill

          1 Reply Last reply Reply Quote 0
          • nzkiwi68N
            nzkiwi68
            last edited by

            Thanks.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.