Snort fails to start on 1.0.1 stable
-
Running the current package (just set it up today). Started it on the command line (the gui was not giving me anything in the system log). Just showing the bottom 15 lines or so:
Rule application order: ->activation->dynamic->pass->drop->alert->log
Log directory = /var/log/snort
Verifying Preprocessor Configurations!
Warning: flowbits key 'dce.bind.veritas' is set but not ever checked.
Warning: flowbits key 'ms_sql_seen_dns' is checked but not ever set.
Warning: flowbits key 'realplayer.playlist' is checked but not ever set.
299 out of 512 flowbits in use.
*** interface device lookup found: fxp0
Initializing Network Interface fxp0
Decoding Ethernet on interface fxp0
ACSM-No Memory: acsmCompile! -
you need a newer version of pfsense
remove snort
then upgrade pfsense with a snapshot
and then install snort again -
We fixed some stuff in the package system that only is available in the latest snapshots. You need to upgrade following the procedure that jeroen234 pointed out.
-
I had the same issue. I just change the "performance" drop-down from "ac-sparsebands" to "ac-banded" and snort started up normally.