Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort will not start on interface

    Scheduled Pinned Locked Moved pfSense Packages
    2 Posts 1 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dave_vooservers
      last edited by

      I have config'd snort to listen on WAN, something we've done many times before on pfSense boxes, however this time it seems a little broken:

      /snort/snort_interfaces.php: The command '/usr/local/bin/snort -R 12486 -D -l /var/log/snort/snort_hn012486 --pid-path /var/run --nolock-pidfile -G 12486 -c /usr/local/etc/snort/snort_12486_hn0/snort.conf -i hn0' returned exit code '1', the output was 'Shared object "libpcap.so.1" not found, required by "snort"
      

      That is in the logs every time i try to start the snort instance on WAN. Surely that should have been installed when the package was installed?

      1 Reply Last reply Reply Quote 0
      • D
        dave_vooservers
        last edited by

        Nevermind… In shell "pkg install libpcap" fixed. Your repo guys might want to check dependencies or something for the snort package, as that should have been installed along with snorts other dependencies. Thanks.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.