Snort will not start on interface



  • I have config'd snort to listen on WAN, something we've done many times before on pfSense boxes, however this time it seems a little broken:

    /snort/snort_interfaces.php: The command '/usr/local/bin/snort -R 12486 -D -l /var/log/snort/snort_hn012486 --pid-path /var/run --nolock-pidfile -G 12486 -c /usr/local/etc/snort/snort_12486_hn0/snort.conf -i hn0' returned exit code '1', the output was 'Shared object "libpcap.so.1" not found, required by "snort"
    

    That is in the logs every time i try to start the snort instance on WAN. Surely that should have been installed when the package was installed?



  • Nevermind… In shell "pkg install libpcap" fixed. Your repo guys might want to check dependencies or something for the snort package, as that should have been installed along with snorts other dependencies. Thanks.


Log in to reply