Strange SNORT problem….



  • Hi,

    I have a strange problem while running snort on a pfsense machine. The problem is, it runs well but after some time snort processes dissapear. Snort is running in the mwm mode. The loaded rules are:

    web-iis.rules
    web-misc.rules
    web-php.rules
    virus.rules
    voip.rules
    web-attacks.rules
    web-cgi.rules
    web-client.rules
    sql.rules
    telnet.rules
    specific-threats.rules
    pop3.rules
    porn.rules
    rpc.rules
    rservices.rules
    scan.rules
    shellcode.rules
    smtp.rules
    nntp.rules
    oracle.rules
    other-ids.rules
    p2p.rules
    policy.rules
    mysql.rules
    finger.rules
    ftp.rules
    icmp-info.rules
    icmp.rules
    imap.rules
    info.rules
    local.rules
    misc.rules
    dns.rules
    dos.rules
    content-replace.rules
    attack-responses.rules
    backdoor.rules
    bad-traffic.rules

    thnx for any help…

    Grzegorz Leśkiewicz



  • Please read the forums before posting, and post to the correct section when you do.



  • Grzegorz, auto-update is broken in the current snort package. Snort will crash whenever it tries to auto-update.

    There is also a bug in in the package that causes snort to auto-update once a week, whether you like it or not!

    I have fixed this bug, and will upload the changes as soon as it goes through a bit more testing.



  • thnx 4 an answer… When do you plan to release a patch for it, so I could sleep well  ;) ?


Log in to reply