Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort 2.9.2.3 pkg v. 2.5.2 dies on IP change

    Scheduled Pinned Locked Moved pfSense Packages
    3 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • _
      _igor_
      last edited by

      Upgraded to the new snort on 2.0.1 amd64, but snort is dying on every IP-change from my ISP. With the 2.5.1 a deinstall and new install resolved the problem for a while, but it came back.

      What i noticed by this way is the fact that snort didnt die till the first automatic update of rules. After the first update of rules its dying regulary.

      1 Reply Last reply Reply Quote 0
      • M
        moe2006
        last edited by

        well, my snort does not die from downloading new rulesets… maybe your snort interface encounters an error trying to download new rules when there is no internet connection due to a change of ip. Also, new rules could require the presence of preprocessors which have been inactive when running with older rules.

        hope this helps.

        1 Reply Last reply Reply Quote 0
        • _
          _igor_
          last edited by

          thank for that advice, but the logs didnt show a (maybe failed) update, when the IP changes, it only and quietly dies. Without any further notice. :(
          Last log-entries were always the IP-change, then as next entry something like  "snort quitting" - nothing more.

          But what i see the last days is that sometimes it doesnt die on IP-change. hmmm. Hard to resolve, i think.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.