Snort Service Won't Start Fatal Error after Latest Update

[kiekar]

Hello,

Just finished updating SNORT to version 3.2.9.3 but now the service won't start. Rebooted, still same problem. Log file shows FATAL Error

May 26 16:57:11 snort 59578 FATAL ERROR: /usr/local/etc/snort/snort_49494_pppoe0/rules/snort.rules(3957) byte_test rule option cannot extract more than 4 bytes without valid string prefix.

.

Any help to point me in the right direction would be much appreciated.

Thanks,

[rebytr]

I had the same problem.  See the end of this thread for the solution that worked for me.

https://forum.pfsense.org/index.php?topic=130993.0

[kiekar]

Hello and thanks. This also worked for me.

[bmeeks]

Looks ilke a syntax error in one of the Emerging Threats rules.

Bill