Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort 3.2.9.10_3 service won't start!

    Scheduled Pinned Locked Moved IDS/IPS
    3 Posts 2 Posters 462 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • HermanH
      Herman
      last edited by

      Hi Folks,

      Have a problem with Snort 3.2.9.10_3. No matter what I do the service won't start. Configured snort to use the WAN interface. Also have a legit oink code.

      The system log shows:

      Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: The command '/usr/local/bin/snort -R 18322 -D -q --suppress-config-log -l /var/log/snort/snort_hn118322 --pid-path /var/run --nolock-pidfile -G 18322 -c /usr/local/etc/snort/snort_18322_hn1/snort.conf -i hn1' returned exit code '1', the output was 'Shared object "libibverbs.so.1" not found, required by "libpcap.so.1"'
      Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Snort START for WAN(hn1)...
      Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Building new sid-msg.map file for WAN...
      Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Enabling any flowbit-required rules for: WAN...
      Apr 5 15:21:26 php /tmp/snort_hn118322_startcmd.php: [Snort] Updating rules configuration for: WAN ...
      Apr 5 15:21:26 php-fpm 27715 /snort/snort_interfaces.php: Starting Snort on WAN(hn1) per user request...

      Searched for solutions on the web as well on this forum? Just not get it going anymore? Somebody that could help me out with this?

      Many thanks in advance!
      Herman F.

      Limburg | The Netherlands.
      It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

      J 1 Reply Last reply Reply Quote 0
      • J
        jdeloach @Herman
        last edited by

        @Herman said in Snort 3.2.9.10_3 service won't start!:

        Hi Folks,

        Have a problem with Snort 3.2.9.10_3. No matter what I do the service won't start. Configured snort to use the WAN interface. Also have a legit oink code.

        The system log shows:

        Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: The command '/usr/local/bin/snort -R 18322 -D -q --suppress-config-log -l /var/log/snort/snort_hn118322 --pid-path /var/run --nolock-pidfile -G 18322 -c /usr/local/etc/snort/snort_18322_hn1/snort.conf -i hn1' returned exit code '1', the output was 'Shared object "libibverbs.so.1" not found, required by "libpcap.so.1"'
        Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Snort START for WAN(hn1)...
        Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Building new sid-msg.map file for WAN...
        Apr 5 15:21:27 php /tmp/snort_hn118322_startcmd.php: [Snort] Enabling any flowbit-required rules for: WAN...
        Apr 5 15:21:26 php /tmp/snort_hn118322_startcmd.php: [Snort] Updating rules configuration for: WAN ...
        Apr 5 15:21:26 php-fpm 27715 /snort/snort_interfaces.php: Starting Snort on WAN(hn1) per user request...

        Searched for solutions on the web as well on this forum? Just not get it going anymore? Somebody that could help me out with this?

        Many thanks in advance!
        Herman F.

        What version of pfSense are you running? Snort 3.2.9.10_3 is only for users running pfSense 2.4.5.

        HermanH 1 Reply Last reply Reply Quote 0
        • HermanH
          Herman @jdeloach
          last edited by

          Hi @jdeloach,

          That would be the problem then. Went back to 2.4.4-RELEASE-p3. With the 2.4.5 I've experience very slow boot of pfsense and the DHCP on the WAN interface didn't work anymore.

          Do not know if that makes sense tot you?

          Greetz,
          Herman F.

          Limburg | The Netherlands.
          It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.