Snort 3.2.9.10_3 service won't start!
-
Hi Folks,
Have a problem with Snort 3.2.9.10_3. No matter what I do the service won't start. Configured snort to use the WAN interface. Also have a legit oink code.
The system log shows:
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: The command '/usr/local/bin/snort -R 18322 -D -q --suppress-config-log -l /var/log/snort/snort_hn118322 --pid-path /var/run --nolock-pidfile -G 18322 -c /usr/local/etc/snort/snort_18322_hn1/snort.conf -i hn1' returned exit code '1', the output was 'Shared object "libibverbs.so.1" not found, required by "libpcap.so.1"'
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Snort START for WAN(hn1)...
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Building new sid-msg.map file for WAN...
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Enabling any flowbit-required rules for: WAN...
Apr 5 15:21:26 php /tmp/snort_hn118322_startcmd.php: [Snort] Updating rules configuration for: WAN ...
Apr 5 15:21:26 php-fpm 27715 /snort/snort_interfaces.php: Starting Snort on WAN(hn1) per user request...Searched for solutions on the web as well on this forum? Just not get it going anymore? Somebody that could help me out with this?
Many thanks in advance!
Herman F. -
@Herman said in Snort 3.2.9.10_3 service won't start!:
Hi Folks,
Have a problem with Snort 3.2.9.10_3. No matter what I do the service won't start. Configured snort to use the WAN interface. Also have a legit oink code.
The system log shows:
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: The command '/usr/local/bin/snort -R 18322 -D -q --suppress-config-log -l /var/log/snort/snort_hn118322 --pid-path /var/run --nolock-pidfile -G 18322 -c /usr/local/etc/snort/snort_18322_hn1/snort.conf -i hn1' returned exit code '1', the output was 'Shared object "libibverbs.so.1" not found, required by "libpcap.so.1"'
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Snort START for WAN(hn1)...
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Building new sid-msg.map file for WAN...
Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Enabling any flowbit-required rules for: WAN...
Apr 5 15:21:26 php /tmp/snort_hn118322_startcmd.php: [Snort] Updating rules configuration for: WAN ...
Apr 5 15:21:26 php-fpm 27715 /snort/snort_interfaces.php: Starting Snort on WAN(hn1) per user request...Searched for solutions on the web as well on this forum? Just not get it going anymore? Somebody that could help me out with this?
Many thanks in advance!
Herman F.What version of pfSense are you running? Snort 3.2.9.10_3 is only for users running pfSense 2.4.5.
-
Hi @jdeloach,
That would be the problem then. Went back to 2.4.4-RELEASE-p3. With the 2.4.5 I've experience very slow boot of pfsense and the DHCP on the WAN interface didn't work anymore.
Do not know if that makes sense tot you?
Greetz,
Herman F.
