Suricata php errors


  • LAYER 8

    i have this problem, whenever i change Rule Action in Alerts tab

    Crash report begins.  Anonymous machine information:
    
    amd64
    12.0-RELEASE-p4
    FreeBSD 12.0-RELEASE-p4 ab606399780(RELENG_2_5) pfSense
    
    Crash report details:
    
    PHP Errors:
    [07-Jun-2019 22:43:41 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:43:52 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:02 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:11 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:19 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:28 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:43 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:51 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:44:58 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:45:08 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:45:18 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:45:29 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:45:38 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:45:54 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:46:10 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:46:21 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:46:32 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:46:40 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:47:04 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:47:19 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:47:38 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:47:59 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:48:19 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:48:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:48:50 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:49:08 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:50:00 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:50:16 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:50:28 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:50:39 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:50:49 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:51:38 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:52:02 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:52:26 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:52:58 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:53:13 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:53:23 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:53:32 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [07-Jun-2019 22:53:41 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:37:53 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:38:05 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:38:16 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:38:27 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:38:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:39:18 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:39:32 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:39:42 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:40:06 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:40:26 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:40:39 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:40:53 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:41:04 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:41:22 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:41:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:41:51 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:42:14 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:42:27 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:42:40 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:42:55 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:43:07 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    [08-Jun-2019 13:43:26 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
    No FreeBSD crash data found.
    

    suricata only on wan inline mode, pfsense 2.5.0
    if more information are needed pls tell me

    line 215 is syslog("LOG_NOTICE, [Suricata] Suricata LIVE RULE RELOAD initiated for {$suricatacfg['descr']} ({$if_real})...");



  • It is a typo bug. Edit this file manually for a short-term fix, and I will get an update posted early next week. Make a copy of it first, just to be safe.

    In file /usr/local/pkg/suricata/suricata/inc, find line 215. It reads like this:

    syslog("LOG_NOTICE, [Suricata] Suricata LIVE RULE RELOAD initiated for {$suricatacfg['descr']} ({$if_real})...");
    

    It should instead read like this:

    syslog(LOG_NOTICE, "[Suricata] Suricata LIVE RULE RELOAD initiated for {$suricatacfg['descr']} ({$if_real})...");
    

    Notice that the LOG_NOTICE part and the comma following it need to both be moved outside the quotation marks. Save the change and you should be good.



  • Update on this error:

    A pull request to correct the problem has been posted for review and merging by the pfSense team. Here is the link: https://github.com/pfsense/FreeBSD-ports/pull/649.

    The error message is not fatal and Suricata will continue to function, but it will spam the pfSense crash dump log with a PHP warning until the new version is posted. The warning crash message will only appear when you perform certain GUI actions that result in calling the function to tell Suricata to live-reload its configuration.

    Sorry for the trouble. That line slipped through my QA testing ... ☹ .


  • LAYER 8

    yeah i saw it wasn't fatal, and when i went to check that line i was pretty sure it was only a minor glich, I just thought it was right to advise, anyway thanks for the info



  • @kiokoman said in Suricata php errors:

    yeah i saw it wasn't fatal, and when i went to check that line i was pretty sure it was only a minor glich, I just thought it was right to advise, anyway thanks for the info

    Yes, thank you very much for the bug report. It was an easy fix on my end, but this is the weekend and I'm not sure the pfSense guy that handles FreeBSD ports is working. It may be Monday before my fix gets merged and appears as an updated package on the Installed Packages tab of PACKAGE MANAGER.


Log in to reply