<![CDATA[Snort issue with Preprocessor's HTTP Inspect]]>I've been having issues with getting page timeouts when I visit certain web pages. Rebooting pfSense temporarily fixes the issue for a few minutes, but then it reappears. After tweaking with various settings I finally isolated the problem by unchecking "Use HTTP Inspect to Normalize/Decode and detect HTTP traffic and protocol anomalies." It was so bad that I couldn't even get to this forum to see if anyone else is having the problem. I'm running pfSense 2.0 (latest i386 release) and Snort 2.9.1 pkg v. 2.0.

I'm just reporting this issue to have it checked out…not a high priority for me, and I'm glad I didn't have to dry-dock my pfSense box and go back to my Netgear wireless router!  ;)

Regards,
Jon

]]>https://forum.netgate.com/topic/39668/snort-issue-with-preprocessor-s-http-inspectRSS for NodeSun, 11 Oct 2026 03:09:23 GMTFri, 02 Dec 2011 12:53:01 GMT60<![CDATA[Reply to Snort issue with Preprocessor's HTTP Inspect on Sat, 03 Dec 2011 18:14:59 GMT]]>I noticed that it wasn't a good idea…none of the rules would load basically causing snort to do a hard crash. I uninstalled/reinstalled Snort, set the suppress list as suggested and so far so good...thanks!

]]>https://forum.netgate.com/post/307194https://forum.netgate.com/post/307194Sat, 03 Dec 2011 18:14:59 GMT<![CDATA[Reply to Snort issue with Preprocessor's HTTP Inspect on Sat, 03 Dec 2011 12:51:50 GMT]]>It's not recomended to disable "Use HTTP Inspect to Normalize/Decode and detect HTTP traffic and protocol anomalies."
Check here instead:
http://forum.pfsense.org/index.php/topic,41533.msg220893.html#msg220893

And here as well:
http://forum.pfsense.org/index.php/topic,43043.msg222725.html#msg222725

]]>https://forum.netgate.com/post/307166https://forum.netgate.com/post/307166Sat, 03 Dec 2011 12:51:50 GMT