Strange SNORT problem….

mstgeo

Hi,

I have a strange problem while running snort on a pfsense machine. The problem is, it runs well but after some time snort processes dissapear. Snort is running in the mwm mode. The loaded rules are:

web-iis.rules
web-misc.rules
web-php.rules
virus.rules
voip.rules
web-attacks.rules
web-cgi.rules
web-client.rules
sql.rules
telnet.rules
specific-threats.rules
pop3.rules
porn.rules
rpc.rules
rservices.rules
scan.rules
shellcode.rules
smtp.rules
nntp.rules
oracle.rules
other-ids.rules
p2p.rules
policy.rules
mysql.rules
finger.rules
ftp.rules
icmp-info.rules
icmp.rules
imap.rules
info.rules
local.rules
misc.rules
dns.rules
dos.rules
content-replace.rules
attack-responses.rules
backdoor.rules
bad-traffic.rules

thnx for any help…

Grzegorz Leśkiewicz

Please read the forums before posting, and post to the correct section when you do.

JustinHoMi

Grzegorz, auto-update is broken in the current snort package. Snort will crash whenever it tries to auto-update.

There is also a bug in in the package that causes snort to auto-update once a week, whether you like it or not!

I have fixed this bug, and will upload the changes as soon as it goes through a bit more testing.

mstgeo

thnx 4 an answer… When do you plan to release a patch for it, so I could sleep well ;) ?