Snort fatal error



  • I installed the latest version
    May 27 12:11:59 snort[35715]: [ Number of null byte prefixed patterns trimmed: 19648 ]
    May 27 12:11:59 snort[35715]: [ Number of null byte prefixed patterns trimmed: 19648 ]
    May 27 12:11:59 snort[35715]:
    May 27 12:11:59 snort[35715]:
    May 27 12:11:59 snort[35715]: –== Initialization Complete ==--
    May 27 12:11:59 snort[35715]: –== Initialization Complete ==--
    May 27 12:11:59 snort[35715]: Snort initialization completed successfully (pid=35715)
    May 27 12:11:59 snort[35715]: Snort initialization completed successfully (pid=35715)
    May 27 12:11:59 snort[35715]: Not Using PCAP_FRAMES
    May 27 12:11:59 snort[35715]: Not Using PCAP_FRAMES
    May 27 12:11:59 snort[35715]:
    May 27 12:11:59 snort[35715]:
    May 27 12:11:59 snort[35715]: –== Reloading Snort ==--
    May 27 12:11:59 snort[35715]: –== Reloading Snort ==--
    May 27 12:11:59 snort[35715]:
    May 27 12:11:59 snort[35715]:
    May 27 12:11:59 snort[35715]: FATAL ERROR: Unable to open rules file "/usr/local/etc/snort/snort_9698_fxp0/snort.conf": No such file or directory.
    May 27 12:11:59 snort[35715]: FATAL ERROR: Unable to open rules file "/usr/local/etc/snort/snort_9698_fxp0/snort.conf": No such file or directory.
    May 27 12:11:59 kernel: fxp0: promiscuous mode disabled
    May 27 12:12:15 dnsmasq[33264]: reading /etc/resolv.conf
    May 27 12:12:15 dnsmasq[33264]: using nameserver 208.67.222.222#53
    May 27 12:12:15 dnsmasq[33264]: using nameserver 208.67.220.220#53





  • Ya i did that and that is also what caused the problem .I think i may go back to my paid astaro .Pfsense it just getting to have to many problems i new i there was reason i never used it for years after the last problem .



  • @cdx304:

    Ya i did that and that is also what caused the problem .I think i may go back to my paid astaro .Pfsense it just getting to have to many problems i new i there was reason i never used it for years after the last problem .

    pfsense has a paid version as well.

    https://portal.pfsense.org/

    "nothing is free in life" - said by a lot of people, this is the gotcha behind all free software, little things like this happen, and usually it is fixed within hours when noticed, happened with clam av, they disabled all version of the program but the most recent, a lot of people were affected not just pfsense, as in this case as well, all users of snort are affected, see the post mentioned by g4m3c4ck.



  • @cdx304

    It would be nice to have more info on your problem.

    What were doing when this error happened ?

    What version of pfsense are you running on ?

    Seems like some of your configs are missing.
    Quick fix is to resave your settings on the interface_edit.php tab.

    James



  • I was doing nothing at all when snort dies .And snort will not start with pfsense after reboot .This started after the last snort update 1.26?


Log in to reply