Re: SNORT Exiting on sig 11

  • How could I figure out which rule is causing snort to crash? I have not added any custom rules, yet I have the same issue every now and then.


  • Snort crashing "every now and then" isn't a rule issue, it's a something else issue.

    If you can include some details (like what version of pfSense and Snort) and anything from the logs, I'm sure somebody will be able to help you narrow down what.

  • If your still having this problem edit your snort interface and check under your "WAN preprocs" that you don't have Application ID Detection enabled.

    Mine seems to have been enabled with the last update and just realised now.

Log in to reply