Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort Issues

    Scheduled Pinned Locked Moved pfSense Packages
    5 Posts 1 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      serialdie
      last edited by

      Well is been a while since I posted… I havent ru in to many issues till now so I decided to upgrade snort and now it wont run no matter what I do...
      Here is what I have in my logs...

      
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:13476 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:13476 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: gid:3, sid:15470\. Fast pattern "only" flag used in combination with a fast pattern offset,length - honoring "only" flag and ignoring fast pattern offset,length.
Oct 28 22:18:59	snort[18031]: WARNING: gid:3, sid:15470\. Fast pattern "only" flag used in combination with a fast pattern offset,length - honoring "only" flag and ignoring fast pattern offset,length.
Oct 28 22:18:59	snort[18031]: DynamicPlugin: Rule [3:15470] not enabled in configuration, rule will not be used.
Oct 28 22:18:59	snort[18031]: DynamicPlugin: Rule [3:15470] not enabled in configuration, rule will not be used.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:15683 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:15683 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:14263 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:14263 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:15851 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: Invalid content option in shared object rule: gid:3, sid:15851 : Fast pattern offset and length cannot be greater than the length of the pattern. Rule will not be registered.
Oct 28 22:18:59	snort[18031]: WARNING: gid:3, sid:16167\. Fast pattern "only" flag used in combination with a fast pattern offset,length - honoring "only" flag and ignoring fast pattern offset,length.
Oct 28 22:18:59	snort[18031]: WARNING: gid:3, sid:16167\. Fast pattern "only" flag used in combination with a fast pattern offset,length - honoring "only" flag and ignoring fast pattern offset,length.
Oct 28 22:19:11	kernel: pid 18031 (snort), uid 0: exited on signal 11 (core dumped)
Oct 28 22:19:11	SnortStartup[18053]: Interface Rule START for 0_10361_vr1..

      Any ideas?

      I am running a Alix Board with 1Ghz CPU and 512 of RAM.

      1 Reply Last reply Reply Quote 0
      • S
        serialdie
        last edited by

        Any body?

        1 Reply Last reply Reply Quote 0
        • S
          serialdie
          last edited by

          Still searching for the light. :)

          1 Reply Last reply Reply Quote 0
          • S
            serialdie
            last edited by

            209 Views and no replys… :(

            1 Reply Last reply Reply Quote 0
            • S
              serialdie
              last edited by

              Well I got most of this one fix. Lets move on to another post.

              Thanks.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.