Snort 3.2.9.9 - Last Update and Result showing "Unknown".
-
Good day everyone,
I experience a strange behavior with my Snort 3.2.9.9 configuration. I followed some setup instructions as found here on the forum. Looks fine so far.The strange part I’ve experience is that the “Last Update” and “Result status” keeps showing “Unknown”. It doesn’t matter if I push the radio button “Update Rules” or “Force Update”!? However, it looks like that the update is executed because the “MD5 Signature Date” is modified every time the rules are updated.
Does anybody have an explanation or solution for this strange behavior? Any help would be appreciated.
Kind regards,
Herman F. -
@Herman said in Snort 3.2.9.9 - Last Update and Result showing "Unknown".:
Good day everyone,
I experience a strange behavior with my Snort 3.2.9.9 configuration. I followed some setup instructions as found here on the forum. Looks fine so far.The strange part I’ve experience is that the “Last Update” and “Result status” keeps showing “Unknown”. It doesn’t matter if I push the radio button “Update Rules” or “Force Update”!? However, it looks like that the update is executed because the “MD5 Signature Date” is modified every time the rules are updated.
Does anybody have an explanation or solution for this strange behavior? Any help would be appreciated.
Kind regards,
Herman F.I think this is my problem: https://forum.netgate.com/topic/145901/snort-can-not-update-it-gose-unknow-all-the-time.
-
I posted a topic thread about the issue here: https://forum.netgate.com/topic/145903/important-notice-regarding-snort-and-suricata-rule-updates-status-messaging.
-
@bmeeks, Thank you for the fast reply. I was a bit fast posting the issues. After I posted the issue I saw your post. Sorry for the inconvenience. I will lay back and wait for your fix. Thanx again.
Herman F.
-
This issue is now corrected in the latest version of the Snort package (v3.2.9.9_1 for pfSense-2.4.4_3 and v4.0_6 for pfSense-2.5-DEVEL).
