2.0.1-RELEASE (amd64) snort version 2.9.2.3 pkg v. 2.2.1 **Fix**
-
Run the following commands from the command line.
pkg_add -f http://files.pfsense.org/packages/8/All/libdnet-1.11_3.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1_1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.2.1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/daq-0.5_1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/snort-2.9.2.3.tbzThese commands will replace the files that are missing on install/reinstall
-
Run the following commands from the command line.
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1_1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.2.1.tbzThese commands will replace the files that are missing on install/reinstall
Sure it needs three versions of the libpcap to work? ???
-
Run the following commands from the command line.
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.1.1_1.tbz
pkg_add -f http://files.pfsense.org/packages/8/All/libpcap-1.2.1.tbzThese commands will replace the files that are missing on install/reinstall
I added all three but I think it will work with just 1.1.1.tbz
Sure it needs three versions of the libpcap to work? ???
-
'Fix' works in command prompt -
--== Initialization Complete ==-- ,,_ -*> Snort! <*- o" )~ Version 2.9.2.3 IPv6 GRE (Build 205) FreeBSD '''' By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team Copyright (C) 1998-2012 Sourcefire, Inc., et al. Using libpcap version 1.2.1 Using PCRE version: 8.30 2012-02-04 Using ZLIB version: 1.2.3 Commencing packet processing (pid=57322)
But, from Snort GUI, I get this error..
Jun 19 09:32:06 SnortStartup[4791]: Interface Rule START for 0_40330_em1... Jun 19 09:32:06 snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device Jun 19 09:32:06 snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device Jun 19 09:32:06 snort[4546]: Log directory = /var/log/snort/snort_em140330 Jun 19 09:32:06 snort[4546]: Log directory = /var/log/snort/snort_em140330 Jun 19 09:32:06 snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor Jun 19 09:32:06 snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor
-
Just wait for the dev to finish, or help him:
-
'Fix' works in command prompt -
--== Initialization Complete ==-- ,,_ -*> Snort! <*- o" )~ Version 2.9.2.3 IPv6 GRE (Build 205) FreeBSD '''' By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team Copyright (C) 1998-2012 Sourcefire, Inc., et al. Using libpcap version 1.2.1 Using PCRE version: 8.30 2012-02-04 Using ZLIB version: 1.2.3 Commencing packet processing (pid=57322)
But, from Snort GUI, I get this error..
Jun 19 09:32:06 SnortStartup[4791]: Interface Rule START for 0_40330_em1... Jun 19 09:32:06 snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device Jun 19 09:32:06 snort[4546]: FATAL ERROR: s2c_pf_intbl() => ioctl() DIOCRGETTABLES: Operation not supported by device Jun 19 09:32:06 snort[4546]: Log directory = /var/log/snort/snort_em140330 Jun 19 09:32:06 snort[4546]: Log directory = /var/log/snort/snort_em140330 Jun 19 09:32:06 snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor Jun 19 09:32:06 snort[4546]: Finished Loading all dynamic preprocessor libs from /usr/local/lib/snort/dynamicpreprocessor
Services/snort/snort interfaces
To the right of the page Click on edit interface
Scroll to the bottom of the page
"Arguments here will be automatically inserted into the snort configuration"
"Advanced configuration pass through"Delete anything that is in the box.
Click save
Again click edit interface and scroll to the bottom. Make sure the box still has nothing in it. If it does again delete anything there, then while your still in the text box hit the space bar then click save
Start snort.
-
;D Thanks to - mschiek01 and to Feadin
After removing snort and all its linked file, I restarted the firewall, installed Snort 2.9.2.3 pkg v. 2.2.1 and,
now it is running.Thanks also to Jimp and Jamesdean.
Now I am looking at Feadin posts: http://forum.pfsense.org/index.php/topic,50643.0.html