Snort automatic restart after pfsense reboot



  • Hiya,

    I have installed snort on a pfsense 2.0.1 and wheni reboot the box, snort does not restart.

    I have to start it manually.

    Is there a fix for this?

    Cheers,

    Raj



  • Your system log would be useful here!
    Probably there is something wrong with your install as well any issue with your config?



  • Mar 6 20:30:32 snort[16260]: TCP Overlaps: 0
    Mar 6 20:30:32 snort[16260]: TCP Segments Queued: 0
    Mar 6 20:30:32 snort[16260]: TCP Segments Queued: 0
    Mar 6 20:30:32 snort[16260]: TCP Segments Released: 0
    Mar 6 20:30:32 snort[16260]: TCP Segments Released: 0
    Mar 6 20:30:32 snort[16260]: TCP Rebuilt Packets: 0
    Mar 6 20:30:32 snort[16260]: TCP Rebuilt Packets: 0
    Mar 6 20:30:32 snort[16260]: TCP Segments Used: 0
    Mar 6 20:30:32 snort[16260]: TCP Segments Used: 0
    Mar 6 20:30:32 snort[16260]: TCP Discards: 0
    Mar 6 20:30:32 snort[16260]: TCP Discards: 0
    Mar 6 20:30:32 snort[16260]: TCP Gaps: 0
    Mar 6 20:30:32 snort[16260]: TCP Gaps: 0
    Mar 6 20:30:32 snort[16260]: UDP Sessions Created: 0
    Mar 6 20:30:32 snort[16260]: UDP Sessions Created: 0
    Mar 6 20:30:32 snort[16260]: UDP Sessions Deleted: 0
    Mar 6 20:30:32 snort[16260]: UDP Sessions Deleted: 0
    Mar 6 20:30:32 snort[16260]: UDP Timeouts: 0
    Mar 6 20:30:32 snort[16260]: UDP Timeouts: 0
    Mar 6 20:30:32 snort[16260]: UDP Discards: 0
    Mar 6 20:30:32 snort[16260]: UDP Discards: 0
    Mar 6 20:30:32 snort[16260]: Events: 0
    Mar 6 20:30:32 snort[16260]: Events: 0
    Mar 6 20:30:32 snort[16260]: Internal Events: 0
    Mar 6 20:30:32 snort[16260]: Internal Events: 0
    Mar 6 20:30:32 snort[16260]: TCP Port Filter
    Mar 6 20:30:32 snort[16260]: TCP Port Filter
    Mar 6 20:30:32 snort[16260]: Dropped: 0
    Mar 6 20:30:32 snort[16260]: Dropped: 0
    Mar 6 20:30:32 snort[16260]: Inspected: 0
    Mar 6 20:30:32 snort[16260]: Inspected: 0
    Mar 6 20:30:32 snort[16260]: Tracked: 0
    Mar 6 20:30:32 snort[16260]: Tracked: 0
    Mar 6 20:30:32 snort[16260]: UDP Port Filter
    Mar 6 20:30:32 snort[16260]: UDP Port Filter
    Mar 6 20:30:32 snort[16260]: Dropped: 0
    Mar 6 20:30:32 snort[16260]: Dropped: 0
    Mar 6 20:30:32 snort[16260]: Inspected: 0
    Mar 6 20:30:32 snort[16260]: Inspected: 0
    Mar 6 20:30:32 snort[16260]: Tracked: 0
    Mar 6 20:30:32 snort[16260]: Tracked: 0
    Mar 6 20:30:32 snort[16260]: ===============================================================================
    Mar 6 20:30:32 snort[16260]: ===============================================================================
    Mar 6 20:30:32 snort[16260]: ===============================================================================
    Mar 6 20:30:32 snort[16260]: ===============================================================================
    Mar 6 20:30:32 snort[16260]: Snort exiting
    Mar 6 20:30:32 snort[16260]: Snort exiting
    Mar 6 20:30:34 ^M ^M
    Mar 6 20:30:35 ^M ^M
    Mar 6 20:31:24 apinger: /usr/local/bin/rrdtool respawning too fast, waiting 300s.

    its a amd64 install.

    Hpe this helps


Log in to reply