Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort signatures update issue?

    Scheduled Pinned Locked Moved pfSense Packages
    22 Posts 16 Posters 12.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      newfirewallman
      last edited by

      So can i get a confirmation on what is working of the scripts, or reinstallation? I have 1.2 Release with Snort installed a week ago.

      1 Reply Last reply Reply Quote 0
      • B
        brookenmire
        last edited by

        I have tried both fixes (curl and ini_set - seperatley) but finding that it takes forever to download the rules files no matter what I use.
        If I download the exact same URL that /usr/local/www/snort_download_rules.php is using at the same time but on a desktop that is on the LAN net behind pfSense, it downloads in a couple of minutes. (no caches involved)

        Multiple attempts on the pfSense box return the same results.
        Traffic shaper is turned off and pfSense is 1.2 prod.

        ls on the temp dir (eg /tmp/snortRulesJ0rIr3/) show it downloading, but very slow ..
        -rw-r–r--  1 root  wheel  167363 Jun 14 20:02 snortrules-snapshot-CURRENT.tar.gz
        -rw-r--r--  1 root  wheel  6637801 Jun 14 20:26 snortrules-snapshot-CURRENT.tar.gz

        Once done, the rules file is a complete file, but Snort downloading seems to hang and does not download the md5 hash.

        Is there any other additional hacking needs to be done to the snort_download_rules.php file to allow it to progress ?
        Does anybody have the above fixes to consistently work ?

        Thanks.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.