Project

General

Profile

Actions

Bug #14834

closed

Alerts Tab throws php error when changing size from 2000 back to 500.

Added by Jonathan Lee almost 2 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
23.05.1
Affected Architecture:
SG-2100

Description

Steps to create:
Change alert tab length of logs display from 1000 back to 500 after apply

ERROR:

Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/www/snort/snort_interfaces.php:324 Stack trace: #0 {main} thrown in /usr/local/www/snort/snort_interfaces.php on line 324 PHP ERROR: Type: 1, File: /usr/local/www/snort/snort_interfaces.php, Line: 324, Message: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/www/snort/snort_interfaces.php:324 Stack trace: #0 {main} thrown


Files

Screenshot 2023-10-03 at 4.09.50 PM.png (278 KB) Screenshot 2023-10-03 at 4.09.50 PM.png Error Jonathan Lee, 10/03/2023 11:12 PM
PHP_errors (5).log (2.23 KB) PHP_errors (5).log crash log Jonathan Lee, 10/03/2023 11:13 PM
Screenshot 2023-10-03 at 4.24.52 PM.png (505 KB) Screenshot 2023-10-03 at 4.24.52 PM.png after reinstall and deletion of logs Jonathan Lee, 10/03/2023 11:25 PM
Actions #3

Updated by Bill Meeks almost 2 years ago

I introduced this bug by way of a typo in my last package fix. The fix for this is posted and awaiting merge and subsequent package builds. Here is the pull request: https://github.com/pfsense/FreeBSD-ports/pull/1301.

This bug results in the Snort interfaces configuration being wiped from the config.xml file. The only solution is to restore from a previous config.xml. That can be an offline backup or the most recent backup from the Configuration History under DIAGNOSTICS > BACKUP AND RESTORE.

Actions #4

Updated by Jim Pingle almost 2 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

PR merged, it's building now

Actions #5

Updated by Jonathan Lee almost 2 years ago

Thanks for looking at this. I found a work around. I disabled the keep config, deleted the package, reinstalled and hand did all the configuration again. I just copy pasted the suppress list and my oink code over and it worked great. I just did not touch the alerts size again. I am updating again now. Thanks.

Actions #6

Updated by Jonathan Lee almost 2 years ago

I don't know if this is of concern also. My Lan interface assignment to snort only detects the destination as the firewall and not listing the Wan IP it is trying to access after this update. Prior it most often listed the LAN and the WAN and did not list the firewall as the destinations.

Actions #7

Updated by Bill Meeks almost 2 years ago

Jonathan Lee wrote in #note-6:

I don't know if this is of concern also. My Lan interface assignment to snort only detects the destination as the firewall and not listing the Wan IP it is trying to access after this update. Prior it most often listed the LAN and the WAN and did not list the firewall as the destinations.

This ticket has been marked RESOLVED and closed by the developer team. There is no value in adding additional unrelated information to this ticket thread.

Please take your issue above to the Netgate Forum for further assistance. It reads like a skill-of-the-craft problem.

Actions

Also available in: Atom PDF