Table snort2c doesn't exist error after gitsync
Thinking this is for a snort release that is coming down the pipe for 2.0. After a recent gitsync, i'm getting the below error when trying to start snort. After looking thru the rcs.pfsense.org log, I came across this change https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/ee21b736077ce5678692fb3c39ccbd755ea0a640. For now i'll manually edit the filter.inc to resolve my issue.
snort: FATAL ERROR: pf.conf => Table snort2c don't exists in packet filter
It's part of the prep for the new snort version.
that's what i figured :-) Looking forward to it
The snort2c table should be back in the current snapshot (at least i386… It may have been too late for amd64, but it'll be in the next one)
mdima last edited by
mmhhh… in version RC1 dated 2/28/2011 is not still there yet, this was blocking a test machine where we were evaluating RC1 (doesn't boot correctly, just inusable)...
When will be released the new update?
jamesdean last edited by
Update to the latest 2.0 RC snapshot the table should be there now.
Its been in the snapshots for at least a week or 2 now.
dullyouth last edited by
i just updated to the rc2.0 snapshot yesterday, snort doesn't seem to be blocking anything, the table is present, however snort2c im assuming there's a script that goes with it isn't present. snort's running, logging the alerts, there is pretty heavy traffic on the network and maybe 15 or so 1-3 priority alerts per hour, i've tried to find as much info as i can for the rc2 snort, but aside from barnyard2 not having the mysql db output plugin i can't find much else, is snort2c/blocking supposed to be working in the rc?