Snort 2.9.2.3 pkg v.2.5.1 won't start (bug #2581 should be reopened)



  • Hi,

    Just upgraded to the subject latest version of Snort and for whatever reason, it simply will not start. I've updated the rules and restarted pfSense ( 2.0.1-RELEASE (i386)). There was a bug opened and subsequently closed at https://redmine.pfsense.org/issues/2581. I think that it should be reopened …there is absolutely no hardware issue with my pfSense box. All IPMI and internal sensor reading are normal, SMART stats from the drives are normal, and everything else but this last iteration of Snort (including the previous version of Snort that I was running) runs perfectly fine.

    The tail end of the system log follows (doesn't look very helpful though) ...any input would be most appreciated ...thx:

    Aug 9 14:58:27 snort[20158]: Finished Loading all dynamic detection libs from /usr/local/etc/snort/snort_23958_em2/dynamicrules
    Aug 9 14:58:27 snort[20158]: Finished Loading all dynamic detection libs from /usr/local/etc/snort/snort_23958_em2/dynamicrules
    Aug 9 14:58:27 snort[20158]: Loading all dynamic preprocessor libs from /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor…
    Aug 9 14:58:27 snort[20158]: Loading all dynamic preprocessor libs from /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor…
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_ftptelnet_preproc.so…
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_ftptelnet_preproc.so…
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_smtp_preproc.so…
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_smtp_preproc.so…
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_dce2_preproc.so…
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_dce2_preproc.so…
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_dns_preproc.so…
    Aug 9 14:58:27 snort[20158]: Loading dynamic preprocessor library /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor/libsf_dns_preproc.so…
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: done
    Aug 9 14:58:27 snort[20158]: Finished Loading all dynamic preprocessor libs from /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor
    Aug 9 14:58:27 snort[20158]: Finished Loading all dynamic preprocessor libs from /usr/local/etc/snort/snort_23958_em2/dynamicpreprocessor
    Aug 9 14:58:27 snort[20158]: Log directory = /var/log/snort/snort_em223958
    Aug 9 14:58:27 snort[20158]: Log directory = /var/log/snort/snort_em223958
    Aug 9 14:58:28 php: /snort/snort_interfaces.php: Interface Rule START for Internet(em2)…
    Aug 9 14:58:28 kernel: pid 20158 (snort), uid 0: exited on signal 11


Locked