Crash Report Suricata V3.0 with Pfsense 2.3

ghkrauss

This crash report is present each time I install Suricata V3.0

Crash report begins. Anonymous machine information:

amd64
10.3-RELEASE
FreeBSD 10.3-RELEASE #493 51f8df0(RELENG_2_3): Wed Mar 30 06:17:53 CDT 2016 root@pfs23-amd64-builder:/usr/home/pfsense/pfsense/tmp/obj/usr/home/pfsense/pfsense/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[31-Mar-2016 13:29:14 EST5EDT] PHP Fatal error: Function name must be a string in /usr/local/pkg/suricata/suricata_check_for_rule_updates.php on line 331
[31-Mar-2016 13:29:14 EST5EDT] PHP Stack trace:
[31-Mar-2016 13:29:14 EST5EDT] PHP 1. {main}() /usr/local/www/suricata/suricata_download_updates.php:0
[31-Mar-2016 13:29:14 EST5EDT] PHP 2. include() /usr/local/www/suricata/suricata_download_updates.php:158
[31-Mar-2016 13:29:14 EST5EDT] PHP 3. suricata_fetch_new_rules() /usr/local/pkg/suricata/suricata_check_for_rule_updates.php:383

Filename: /var/crash/minfree
2048

bmeeks

There is a typo in that file. Not sure how long it has been there or why it would not have shown up sooner. You can manually fix it in the short term while I get a fix posted.

Open the file /usr/local/pkg/suricata/suricata_check_for_rule_updates.php in the editor

Find line 331. I've highlighted it in maroon below.

// Test integrity of the rules file. Turn off update if file has wrong md5 hash
if ($file_md5 != trim(md5_file($file_dst))){
$update_status(gettext("{$desc} file MD5 checksum failed!") . "\n");
log_error(gettext("[Suricata] {$desc} file download failed. Bad MD5 checksum."));

Remove the leading $ sign in front of "update_status" and save the file.

Bill

ghkrauss

Bill:

Thanks for the update.

Howard

bmeeks

A new package version has been posted that fixed this issue. It is package version 3.0_5.

Bill