Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort no longer working after 2.3.3 Upgrade

    Scheduled Pinned Locked Moved IDS/IPS
    2 Posts 2 Posters 890 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      patd
      last edited by

      I thought I would add a topic for this as well because I feel like it might apply to other packages that were once working in an earlier version pfsense.

      As of upgrading to Pfsense version 2.3.3, I was unable to upgrade my snort package as well, kept get an error that the specified directory could not be found.

      I uninstalled snort all together and just installed the newest snort version from scratch.

      The package installs; however, it doesn't turn up under my Services tab and does not show up as a running service in my dashboard like it once did.

      Package is installed but not running or accessible.

      1 Reply Last reply Reply Quote 0
      • N
        netnewb
        last edited by

        I saw this in the logs after the update:

        /etc/rc.packages: [Snort] Removing all blocked hosts from <snort2c>table…
        /etc/rc.packages: [Snort] Removing package files…
        /etc/rc.packages: [Snort] Not saving settings… all Snort configuration info and logs will be deleted...
        /etc/rc.packages: [Snort] Flushing <snort2c>firewall table to remove addresses blocked by Snort…
        /etc/rc.packages: [Snort] The package has been completely removed from this system.</snort2c></snort2c>

        Snort showed up in Installed packages with "newer version available". Tried to update:

        Removing snort components…
        Menu items... done.
        Services... done.
        Loading package instructions...
        pfSense-pkg-snort-3.2.9.1_14: missing file /usr/local/share/licenses/pfSense-pkg-snort-3.2.9.1_14/ESF
        pfSense-pkg-snort-3.2.9.1_14: missing file /usr/local/share/licenses/pfSense-pkg-snort-3.2.9.1_14/LICENSE
        pfSense-pkg-snort-3.2.9.1_14: missing file /usr/local/share/licenses/pfSense-pkg-snort-3.2.9.1_14/catalog.mk
        pkg: Fail to rename /var/db/snort/sidmods/.disablesid-sample.conf.xmxAXuJE48b4 -> /var/db/snort/sidmods/disablesid-sample.conf: No such file or directory
        Failed

        Removed package. It threw some errors (attached). Rebooted.

        Installed snort again without a problem. It now shows up in services and my settings are there too.

        Have you tried turning it off and on again?

        [snort package removal error.txt](/public/imported_attachments/1/snort package removal error.txt)

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.