Project

General

Profile

Actions

Bug #14993

closed

Snort *.so.rules will not down

Added by Jonathan Lee over 1 year ago. Updated over 1 year ago.

Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
21.05.1
Affected Architecture:
SG-2100

Description

Working with Bill on this today we found that *.so.rulea are not downloading into the rule set folder.


Files

Screenshot_20231115-200351.png (146 KB) Screenshot_20231115-200351.png Good Dowload Jonathan Lee, 11/16/2023 06:50 AM
Screenshot_20231115-204533.png (272 KB) Screenshot_20231115-204533.png Rules do not show in folder Jonathan Lee, 11/16/2023 06:50 AM
Screenshot_20231115-225315.png (222 KB) Screenshot_20231115-225315.png So rules missing from GUI and folder Jonathan Lee, 11/16/2023 06:53 AM
Actions #2

Updated by Jonathan Lee over 1 year ago

usr/local/etc/snort/rules

Contains no so.rules on 2100 max anymore for some reason. No custom scrips used.

Actions #3

Updated by Bill Meeks over 1 year ago

This is not a bug. This behavior is expected and per design.

The user has an SG-2100 MAX appliance which uses an ARM CPU. The Snort Shared Object (SO) rules are precompiled only for Intel AMD64 CPUs. They would not function on ARM hardware, and thus the package GUI code rightly does not copy them out of the rules archive.

Please work through these types of questions on a Netgate Forum thread before jumping to submit pointless bug reports. I was in the middle of a thread working through this with you, but you jumped out and submitted a spurious bug report. Here is the thread: https://forum.netgate.com/topic/184128/snort-and-paid-rule-subscriptions?_=1700145495355.

Actions #4

Updated by Jim Pingle over 1 year ago

  • Status changed from New to Not a Bug
Actions #5

Updated by Jonathan Lee over 1 year ago

Thanks I did not know that. So it has no code to work with ARM processors yet...

I should make this a feature request. Thanks sorry I did not know this.

Actions

Also available in: Atom PDF