Snort 2.9.1 pkg v. 2.1.1 update broke my Snort



  • I had things running after initial install, but after making a few category selection changes the interface won't start anymore; for either of my two.

    UPDATE If I turn off the block feature for interface it will start the interface.

    Here's some of my logs -

    Jan 27 09:18:56 SnortStartup[58517]: Interface Rule START for 0_62376_bge1…
    Jan 27 09:18:56 snort[58352]: FATAL ERROR: pf.conf => Table snort2c,src, don't exists in packet filter
    Jan 27 09:18:56 snort[58352]: FATAL ERROR: pf.conf => Table snort2c,src, don't exists in packet filter
    Jan 27 09:18:56 snort[58352]: Log directory = /var/log/snort
    Jan 27 09:18:56 snort[58352]: Log directory = /var/log/snort
    Jan 27 09:18:56 snort[58352]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor
    Jan 27 09:18:56 snort[58352]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor
    Jan 27 09:18:56 snort[58352]: done
    Jan 27 09:18:56 snort[58352]: done



  • ever heard of search?

    http://forum.pfsense.org/index.php/topic,45520.0.html

    try un-install reboot and re-install…. your box didn't download the binaries



  • Didn't have to do this when I upgraded to 2.1; I saw the post for 2.1, but figured it would not apply.  Sorry… didn't bother to search when the version just showed up.  Thanks for at least pointing me in the right direction Cino.

    ***UPDATE *** BTW, I didn't have to restart the system.  Just uninstall and reinstall.



  • @mentalhemroids:

    ***UPDATE *** BTW, I didn't have to restart the system.  Just uninstall and reinstall.

    usually you dont need to reboot but i throw that out there to be safe


Log in to reply