Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Suricata php errors

    Scheduled Pinned Locked Moved IDS/IPS
    5 Posts 2 Posters 264 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • kiokomanK
      kiokoman LAYER 8
      last edited by kiokoman

      i have this problem, whenever i change Rule Action in Alerts tab

      Crash report begins.  Anonymous machine information:
      
      amd64
      12.0-RELEASE-p4
      FreeBSD 12.0-RELEASE-p4 ab606399780(RELENG_2_5) pfSense
      
      Crash report details:
      
      PHP Errors:
      [07-Jun-2019 22:43:41 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:43:52 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:02 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:11 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:19 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:28 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:43 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:51 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:44:58 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:45:08 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:45:18 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:45:29 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:45:38 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:45:54 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:46:10 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:46:21 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:46:32 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:46:40 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:47:04 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:47:19 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:47:38 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:47:59 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:48:19 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:48:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:48:50 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:49:08 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:50:00 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:50:16 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:50:28 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:50:39 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:50:49 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:51:38 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:52:02 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:52:26 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:52:58 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:53:13 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:53:23 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:53:32 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [07-Jun-2019 22:53:41 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:37:53 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:38:05 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:38:16 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:38:27 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:38:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:39:18 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:39:32 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:39:42 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:40:06 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:40:26 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:40:39 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:40:53 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:41:04 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:41:22 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:41:36 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:41:51 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:42:14 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:42:27 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:42:40 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:42:55 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:43:07 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      [08-Jun-2019 13:43:26 Europe/Rome] PHP Warning:  syslog() expects exactly 2 parameters, 1 given in /usr/local/pkg/suricata/suricata.inc on line 215
      No FreeBSD crash data found.
      

      suricata only on wan inline mode, pfsense 2.5.0
      if more information are needed pls tell me

      line 215 is syslog("LOG_NOTICE, [Suricata] Suricata LIVE RULE RELOAD initiated for {$suricatacfg['descr']} ({$if_real})...");

      ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
      Please do not use chat/PM to ask for help
      we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
      Don't forget to Upvote with the 👍 button for any post you find to be helpful.

      1 Reply Last reply Reply Quote 0
      • bmeeksB
        bmeeks
        last edited by bmeeks

        It is a typo bug. Edit this file manually for a short-term fix, and I will get an update posted early next week. Make a copy of it first, just to be safe.

        In file /usr/local/pkg/suricata/suricata/inc, find line 215. It reads like this:

        syslog("LOG_NOTICE, [Suricata] Suricata LIVE RULE RELOAD initiated for {$suricatacfg['descr']} ({$if_real})...");
        

        It should instead read like this:

        syslog(LOG_NOTICE, "[Suricata] Suricata LIVE RULE RELOAD initiated for {$suricatacfg['descr']} ({$if_real})...");
        

        Notice that the LOG_NOTICE part and the comma following it need to both be moved outside the quotation marks. Save the change and you should be good.

        1 Reply Last reply Reply Quote 0
        • bmeeksB
          bmeeks
          last edited by bmeeks

          Update on this error:

          A pull request to correct the problem has been posted for review and merging by the pfSense team. Here is the link: https://github.com/pfsense/FreeBSD-ports/pull/649.

          The error message is not fatal and Suricata will continue to function, but it will spam the pfSense crash dump log with a PHP warning until the new version is posted. The warning crash message will only appear when you perform certain GUI actions that result in calling the function to tell Suricata to live-reload its configuration.

          Sorry for the trouble. That line slipped through my QA testing ... ☹ .

          1 Reply Last reply Reply Quote 0
          • kiokomanK
            kiokoman LAYER 8
            last edited by

            yeah i saw it wasn't fatal, and when i went to check that line i was pretty sure it was only a minor glich, I just thought it was right to advise, anyway thanks for the info

            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
            Please do not use chat/PM to ask for help
            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

            bmeeksB 1 Reply Last reply Reply Quote 0
            • bmeeksB
              bmeeks @kiokoman
              last edited by bmeeks

              @kiokoman said in Suricata php errors:

              yeah i saw it wasn't fatal, and when i went to check that line i was pretty sure it was only a minor glich, I just thought it was right to advise, anyway thanks for the info

              Yes, thank you very much for the bug report. It was an easy fix on my end, but this is the weekend and I'm not sure the pfSense guy that handles FreeBSD ports is working. It may be Monday before my fix gets merged and appears as an updated package on the Installed Packages tab of PACKAGE MANAGER.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.