Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort wont start after Upgrade to pFsense 21.02 on (SG3100)

    Scheduled Pinned Locked Moved IDS/IPS
    13 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • styxlS
      styxl
      last edited by styxl

      Snort is no longer running or available as a menu option on the SG3100 GUI post upgrade, i have installed and re-installed the package and rebooted the router multiple times to no avail.

      Package status shows Snort installed
      Capture3.PNG

      startup logs say the same

      Capture1.PNG

      Services tab, snort is nowhere to be found
      Capture2.PNG

      is this expected?

      A 1 Reply Last reply Reply Quote 0
      • A
        alpharulez @styxl
        last edited by

        @styxl I had the same issue on update and i have tried to remove the package and reinstall. Now i see it in the menu but services dont start. It does not start on the interfaces either when i recreated them. have deleted settings, fresh install and updated yet no luck. Getting frustrated with this update.

        styxlS 1 Reply Last reply Reply Quote 0
        • styxlS
          styxl @alpharulez
          last edited by

          @alpharulez i decided to rollback to 2.4.5-P1

          A 1 Reply Last reply Reply Quote 0
          • A
            alpharulez @styxl
            last edited by

            @styxl Thats a shame. I see it showing as deprecated and wondering if I should go ahead and do the same!

            styxlS 2 Replies Last reply Reply Quote 0
            • styxlS
              styxl @alpharulez
              last edited by

              @alpharulez i would advise so, yesterday i even tried the development release to no avail, so i decided to just downgrade and wait for a new stable SNORT release

              1 Reply Last reply Reply Quote 0
              • styxlS
                styxl @alpharulez
                last edited by

                @alpharulez there is also a swap issue on this release, my SG3100 started complaining about SWAP running out and stopped all processes very random and weird.....that was the last straw.....i downgraded back to 2.4.5-p1

                Feb 19 08:54:56 Scimitar kernel: pid 83444 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:54:58 Scimitar kernel: pid 83790 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:54:59 Scimitar kernel: pid 83879 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:00 Scimitar kernel: pid 83935 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:01 Scimitar kernel: pid 86354 (php), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:03 Scimitar kernel: pid 90677 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:04 Scimitar kernel: pid 90898 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:05 Scimitar kernel: pid 91135 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:07 Scimitar kernel: pid 91384 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:08 Scimitar kernel: pid 91448 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:09 Scimitar kernel: pid 91770 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:10 Scimitar kernel: pid 91931 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:12 Scimitar kernel: pid 91942 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:13 Scimitar kernel: pid 92067 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:14 Scimitar kernel: pid 92117 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:16 Scimitar kernel: pid 92343 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:17 Scimitar kernel: pid 92535 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:18 Scimitar kernel: pid 92680 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:19 Scimitar kernel: pid 92745 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:21 Scimitar kernel: pid 93068 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:22 Scimitar kernel: pid 93198 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:23 Scimitar kernel: pid 93218 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:25 Scimitar kernel: pid 93546 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:26 Scimitar kernel: pid 6301 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:27 Scimitar kernel: pid 59052 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:28 Scimitar kernel: pid 33671 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:30 Scimitar kernel: pid 7732 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:31 Scimitar kernel: pid 7244 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:32 Scimitar kernel: pid 7547 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:34 Scimitar kernel: pid 758 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:36 Scimitar kernel: pid 7776 (php-fpm), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:37 Scimitar kernel: pid 6685 (ps), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:38 Scimitar nginx: 2021/02/19 08:55:38 [alert] 64956#100137: worker process 65392 exited on signal 9
                Feb 19 08:55:38 Scimitar kernel: pid 65392 (nginx), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:40 Scimitar kernel: pid 72123 (dhcpd), jid 0, uid 136, was killed: out of swap space
                Feb 19 08:55:41 Scimitar kernel: pid 72621 (dhcpd), jid 0, uid 136, was killed: out of swap space
                Feb 19 08:55:42 Scimitar kernel: pid 66248 (ntpd), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:43 Scimitar kernel: pid 9566 (avahi-daemon), jid 0, uid 558, was killed: out of swap space
                Feb 19 08:55:45 Scimitar kernel: pid 27404 (sshg-blocker), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:46 Scimitar nginx: 2021/02/19 08:55:46 [alert] 64956#100137: worker process 65272 exited on signal 9
                Feb 19 08:55:46 Scimitar kernel: pid 65272 (nginx), jid 0, uid 0, was killed: out of swap space
                Feb 19 08:55:47 Scimitar kernel: pid 13499 (pcscd), jid 0, uid 0, was killed: out of swap space
                
                
                A 1 Reply Last reply Reply Quote 0
                • A
                  alpharulez @styxl
                  last edited by

                  @styxl

                  Just realised my wifi access point connected to pfsense (dhcp server) is dropping connections and have to reboot everything to bring it all back up. Going to track this some more and then decide if i am going to revert to older branch.

                  1 Reply Last reply Reply Quote 1
                  • styxlS
                    styxl
                    last edited by

                    the swap issue caused DHCP to stop, bunch of devices were stranded the whole night (security cameras etc.), i think reverting was the right decision for now. Hopefully Netgate releases a patch that resolves all these issues within the next few days especially for folks using their appliances

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      alpharulez @styxl
                      last edited by

                      @styxl Ahh that could be it.
                      How did you revert to previous branch?
                      Thanks

                      styxlS 1 Reply Last reply Reply Quote 0
                      • styxlS
                        styxl @alpharulez
                        last edited by

                        @alpharulez via USB, i used console to boot and used USB to recover to the previous release, then restored the configs i had backed up externally. You cannot do this from the GUI

                        Guide:
                        https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/reinstall-pfsense.html

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          alpharulez @styxl
                          last edited by

                          @styxl Ahh got it. thanks

                          styxlS 1 Reply Last reply Reply Quote 0
                          • styxlS
                            styxl @alpharulez
                            last edited by

                            @alpharulez see this thread from the Dev, it looks like there is a serious issue with the release,

                            https://forum.netgate.com/topic/160959/21-02-sudden-lockup/96

                            A 1 Reply Last reply Reply Quote 1
                            • A
                              alpharulez @styxl
                              last edited by

                              @styxl
                              Thanks - have posted there as well..

                              Now the System/ Package Manager/ Available Packages does not show any packages for me to install...

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.