crash after each rule update

manilx

Hi

since updating to the new Suricata 6.0.10_1 I get a crash EACH time the rules update:


PHP errors

    PHP ERROR: Type: 1, File: /usr/local/pkg/suricata/suricata_check_for_rule_updates.php, Line: 820, Message: Uncaught ValueError: gettext(): Argument #1 ($message) is too long in /usr/local/pkg/suricata/suricata_check_for_rule_updates.php:820
    Stack trace:
    #0 /usr/local/pkg/suricata/suricata_check_for_rule_updates.php(820): gettext('- Snort rules: ...')
    #1 {main}
    thrown @ 2023-02-22 00:37:20
    PHP ERROR: Type: 1, File: /usr/local/pkg/suricata/suricata_check_for_rule_updates.php, Line: 820, Message: Uncaught ValueError: gettext(): Argument #1 ($message) is too long in /usr/local/pkg/suricata/suricata_check_for_rule_updates.php:820
    Stack trace:
    #0 /usr/local/pkg/suricata/suricata_check_for_rule_updates.php(820): gettext('- Snort rules: ...')
    #1 {main}
    thrown @ 2023-02-22 08:18:35


Any way to fix this?

manilx

@manilx If I disable snort rules and only use Emerging Threats then the crash is avoided.
Disabled them for the time being.

manilx

@manilx Fixed by switching to snort 2.9 ruleset. Was using 3.x one by error.