Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort auto-starting?

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 512 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      droidus
      last edited by

      I have Snort installed on my device, and I am sure that I had it stopped. My device has been on for over 200 days, so it has not been recently rebooted. I logged in to find that Snort is running. Is there any reason it would start on its own?

      1 Reply Last reply Reply Quote 0
      • bmeeksB
        bmeeks
        last edited by

        Anything that causes the pfSense built-in script "restart all packages" to execute would automatically restart Snort (since it is an installed package). The "restart all packages" script can be triggered by several events within pfSense (for instance, your WAN IP cycling to a new value or the link going down and then back up).

        If you truly do not want Snort to ever start on an interface, go to the INTERFACE SETTINGS tab for that instance and uncheck the Enable checkbox. That will disable Snort on that interface.

        1 Reply Last reply Reply Quote 2
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.