Snort Update error 422

fireodo

Hi everybody,

since this morning I get this error when trying to update Snort rules:
"Starting rules update... Time: 2021-12-08 02:20:11
Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
Snort Subscriber rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort Subscriber rules will not be updated."

Snort is on 4.1.4_3 and pfsense on 2.5.2.

Anybody else too?

Regards,
fireodo

jdeloach

@fireodo said in Snort Update error 422:

Hi everybody,

since this morning I get this error when trying to update Snort rules:
" Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
Snort Subscriber rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort Subscriber rules will not be updated."

Snort is on 4.1.4_3 and pfsense on 2.5.2.

Anybody else too?

Regards,
fireodo

I have the same error on my system as well. I wonder if it has anything to do with the new version of Snort, 2.9.19.0, being released a couple days ago.
Maybe @bmeeks will chime in later this morning. Seems like Snort has screwed up the rules set a few times recently.

Scooter13

Same issue:

snort-2.9.18_1

Starting rules update... Time: 2021-12-08 00:01:08
Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
Snort Subscriber rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort Subscriber rules will not be updated.

fireodo

@jdeloach said in Snort Update error 422:

I wonder if it has anything to do with the new version of Snort, 2.9.19.0, being released a couple days ago.

This i guess in the meanwhile also ...

isewanus

I have the same problem since last night even though I reinstalled the snort package.

Starting rules update... Time: 2021-12-07 18:05:26
Downloading Snort Subscriber rules md5 file snortrules-snapshot-29180.tar.gz.md5...
Snort Subscriber rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort Subscriber rules will not be updated.

pfSense+ 21.05.2-RELEASE
snort package 4.1.4_3 (snort-2.9.18_1)

bmeeks

Yeah, looks like we are behind on updating the binary. I will get an update submitted to the Netgate team. May take a day or two to get it through the review process, though.

fireodo

@bmeeks said in Snort Update error 422:

I will get an update submitted to the Netgate team. May take a day or two to get it through the review process, though.

Thanks a lot, Bill!

Kind regards,
fireodo

isewanus

@bmeeks Thank you for your kind help!

bmeeks

I've posted a Snort package update for the Netgate/pfSense team to review and merge. Hopefully this happens in a day or two. The new Snort package version on pfSense will be 4.1.5 when it posts. It will contain the latest 2.9.19 snort binary.

stephenw10

I forked off the QUIC discussion from this.

fireodo

@stephenw10 said in Snort Update error 422:

I forked off the QUIC discussion from this.

Thanks!

JonathanLee

@fireodo Hello is there a new link for the forked discussion on QUIC or is that part deleted now? I am still new to Netgate community posts. Sorry we got a bit side tracked with topics on this one. QUIC is new and exciting for the world of firewall software.