Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SNORT: promiscuous mode disabled + promiscuous mode enabled error + exited on signal 11 (core dumped)

    Scheduled Pinned Locked Moved IDS/IPS
    24 Posts 5 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DD @bmeeks
      last edited by

      @bmeeks Yes, because if I looking to alerts and blocked tab then alerts and blocked items are increasing and Snort is working ok. But after sometime snort will stop and log only one row: exited on signal 11 (core dumped).

      1 Reply Last reply Reply Quote 0
      • W
        wolfsden3
        last edited by

        Hey guys / gals / they / thems, etc...

        I did the 2.7.1 update on one of the boxes I had this issue with > re-enabled kill states > haven't had a problem.

        Did 2.7.1 resolve this SNORT issue is some magical way? I think SNORT is the same version but I didn't confirm this.

        Many Thanks!

        S bmeeksB 2 Replies Last reply Reply Quote 0
        • S
          SteveITS Galactic Empire @wolfsden3
          last edited by

          @wolfsden3 there’s an update coming any time now, see https://forum.netgate.com/topic/184112/important-snort-and-suricata-package-announcement-probable-bug-in-legacy-blocking-module/

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote 👍 helpful posts!

          1 Reply Last reply Reply Quote 0
          • bmeeksB
            bmeeks @wolfsden3
            last edited by

            @wolfsden3 said in SNORT: promiscuous mode disabled + promiscuous mode enabled error + exited on signal 11 (core dumped):

            Hey guys / gals / they / thems, etc...

            I did the 2.7.1 update on one of the boxes I had this issue with > re-enabled kill states > haven't had a problem.

            Did 2.7.1 resolve this SNORT issue is some magical way? I think SNORT is the same version but I didn't confirm this.

            Many Thanks!

            As @SteveITS mentioned in his response with this link:

            https://forum.netgate.com/topic/184112/important-snort-and-suricata-package-announcement-probable-bug-in-legacy-blocking-module/

            There is a thread where I am posting updates. I will put them in the original post at the top of that thread.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.