Crash Report Suricata V3.0 with Pfsense 2.3



  • This crash report is present each time I install Suricata V3.0

    Crash report begins.  Anonymous machine information:

    amd64
    10.3-RELEASE
    FreeBSD 10.3-RELEASE #493 51f8df0(RELENG_2_3): Wed Mar 30 06:17:53 CDT 2016    root@pfs23-amd64-builder:/usr/home/pfsense/pfsense/tmp/obj/usr/home/pfsense/pfsense/tmp/FreeBSD-src/sys/pfSense

    Crash report details:

    PHP Errors:
    [31-Mar-2016 13:29:14 EST5EDT] PHP Fatal error:  Function name must be a string in /usr/local/pkg/suricata/suricata_check_for_rule_updates.php on line 331
    [31-Mar-2016 13:29:14 EST5EDT] PHP Stack trace:
    [31-Mar-2016 13:29:14 EST5EDT] PHP  1. {main}() /usr/local/www/suricata/suricata_download_updates.php:0
    [31-Mar-2016 13:29:14 EST5EDT] PHP  2. include() /usr/local/www/suricata/suricata_download_updates.php:158
    [31-Mar-2016 13:29:14 EST5EDT] PHP  3. suricata_fetch_new_rules() /usr/local/pkg/suricata/suricata_check_for_rule_updates.php:383

    Filename: /var/crash/minfree
    2048



  • There is a typo in that file.  Not sure how long it has been there or why it would not have shown up sooner.  You can manually fix it in the short term while I get a fix posted.

    Open the file /usr/local/pkg/suricata/suricata_check_for_rule_updates.php in the editor

    Find line 331. I've highlighted it in maroon below.

    // Test integrity of the rules file.  Turn off update if file has wrong md5 hash
    if ($file_md5 != trim(md5_file($file_dst))){
    $update_status(gettext("{$desc} file MD5 checksum failed!") . "\n");
    log_error(gettext("[Suricata] {$desc} file download failed.  Bad MD5 checksum."));

    Remove the leading $ sign in front of "update_status" and save the file.

    Bill



  • Bill:

    Thanks for the update.

    Howard



  • A new package version has been posted that fixed this issue.  It is package version 3.0_5.

    Bill


Log in to reply