SG-3100 21.02 Snort Missing From Services
-
I installed Pfsense ver21.02 on my SG-3100 a couple of days ago and since then Snort has not appeared under the Services list.. However I can see it is installed under Package manager. Also, a direct link to "https://myinternal.ip/snort/snort_interfaces.php" shows it installed but unable to start.
Is this another glitch w/ 21.02. I've tried reinstallation of Snort several times.
-
@dfcookno I posted prior to reading https://forum.netgate.com/topic/161050/snort-won-t-start-after-upgrade-to-21-02-on-sg-3100/3
Appears there is no current solution until an upstream patch :-( -
Below root cause from post by bmeeksbmeeks seems to sum this up.
https://forum.netgate.com/topic/159902/snort-package-v4-1-3-update-release-notes/17
bmeeksbmeeks 2 days ago
@rloeb said in Snort Package v4.1.3 Update -- Release Notes:Confirmed that it's not working on SG-3100. Installed succeeded, but it doesn't start (or fails after it starts, although I'm not seeing that in the logs).
The main issue on the SG-3100 is that a portion of the Snort GUI code that runs when you click the Start icon is crashing PHP itself on the firewall. Why that happens has not yet been pinned down. The exact same GUI code runs just fine on everything else (SG-1100, SG-5100 and any other device that has a CPU that is not a 32-bit ARM chip). So that hints the issue is something with PHP itself on 32-bit ARM architecture, but nothing is proven yet.
This crashing of PHP will also likely interfere with the installation of Snort as it calls the same area of code during post-installation configuration. If PHP crashes then, it will likely not complete the last step of the installation which is creating the menu entry under SERVICES.colored text