Snort "double logging" to pfSense logs



  • I'm running Snort 2.8.6 pkg 1.27 on pfSense 1.2.3-RELEASE.  For the last couple versions maybe of the package I've noticed that Snort is printing its messages to the pfSense log twice each.  That is, each message or alert from Snort is logged twice in succession in the pfSense system log with the exact same timestamps.  Is this normal?  I don't remember for sure, but I don't think this happened when I first loaded the Snort package earlier this year.



  • Its normal, I's an old bug. Its not snort, its something with the logging configuration in Pfsense.
    I'll fix it in latter versions.

    James


Locked