Packages were uninstalled?



  • I woke up this morning and noticed that two packages I had previously installed were missing from my services. One of those packages was snort, and the other was ssh. I am wondering if this is some sort of a bug or a security problem. Any information would be helpful.

    Thanks
    Eckman



  • Here is the system log file.

    Feb 7 03:33:56 php: : XML error: not well-formed (invalid token) at line 1
    Feb 7 03:33:48 php: : Beginning package installation for .
    Feb 7 03:33:48 php: : cd /var/db/pkg && pkg_delete ls | grep 0
    Feb 7 03:33:47 php: : cd /var/db/pkg && pkg_delete ls | grep sshterm
    Feb 7 03:33:47 php: : cd /var/db/pkg && pkg_delete ls | grep
    Feb 7 03:33:45 php: : Beginning package installation for .
    Feb 7 03:33:44 php: : Could not find snort_advanced.xml … Reinstalling package.
    Feb 7 03:33:44 php: : New alert found: The snort package is missing required dependencies and must be reinstalled.
    Feb 7 03:33:37 php: : Beginning package installation for .
    Feb 7 03:33:36 php: : cd /var/db/pkg && pkg_delete ls | grep 0
    Feb 7 03:33:18 php: : cd /var/db/pkg && pkg_delete ls | grep snort
    Feb 7 03:33:18 php: : cd /var/db/pkg && pkg_delete ls | grep
    Feb 7 03:33:16 SnortStartup[78986]: Ram free BEFORE starting Snort: 298M – Ram free AFTER starting Snort: 298M -- Mode lowmem -- Snort memory usage:
    Feb 7 03:32:56 SnortStartup[78930]: Ram free BEFORE starting Snort: 298M – Ram free AFTER starting Snort: 298M -- Mode lowmem -- Snort memory usage:



  • where you box rebootet?, if so i have also noticed that snort get´s uninstalled upon reboot

    /f



  • Unless it had a BSOD, and I wasn't there to see it I didn't reboot it. I noticed that snort, and ssh were removed in the morning. I am hoping this is a bug and not a vulnerability related issue.

    Thanks
    Glenn



  • i had exactly the same problem: snort was automatically  uninstalled

    Apr 1 14:14:57 php: : XML error: not well-formed (invalid token) at line 1
    Apr 1 14:14:57 php: : Beginning package installation for .
    Apr 1 14:14:56 php: : cd /var/db/pkg && pkg_delete ls | grep 0
    Apr 1 14:14:56 php: : XML error: not well-formed (invalid token) at line 1
    Apr 1 14:14:56 php: : cd /var/db/pkg && pkg_delete ls | grep
    Apr 1 14:14:56 php: : cd /var/db/pkg && pkg_delete ls | grep
    Apr 1 14:14:56 php: : XML error: not well-formed (invalid token) at line 1
    Apr 1 14:14:54 php: : XML error: not well-formed (invalid token) at line 1
    Apr 1 14:14:54 php: : Beginning package installation for .
    Apr 1 14:14:54 php: : Could not find snort_advanced.xml … Reinstalling package.
    Apr 1 14:14:54 php: : New alert found: The snort package is missing required dependencies and must be reinstalled.
    Apr 1 14:14:52 php: : XML error: not well-formed (invalid token) at line 1
    Apr 1 14:14:52 php: : Beginning package installation for .
    Apr 1 14:14:51 php: : cd /var/db/pkg && pkg_delete ls | grep 0
    Apr 1 14:14:38 php: : cd /var/db/pkg && pkg_delete ls | grep snort
    Apr 1 14:14:37 php: : cd /var/db/pkg && pkg_delete ls | grep
    Apr 1 14:14:33 SnortStartup[1021]: Ram free BEFORE starting Snort: 941M – Ram free AFTER starting Snort: 941M -- Mode ac-sparsebands -- Snort memory usage:



  • Same with me. After I had reinstalled the latest squid package, snort was gone and I had to reinstall the whole pfsense machine.

    Very strange… But, I am happy that I am not the only one who had this issue.



  • Hello,

    I also experienced the same problem. But a more strange thing related to this issue is, when I reinstalled snort package, I noticed that my previous oinkmaster code has not been changed.



  • Snort has some kind of problem that it uninstalls itself at reboot, I'm not sure if it's a problem with the package system or the snort package itself, one or the other has some sort of bug.

    It will retain the configuration.


Log in to reply