Bug #14993
closed
Snort *.so.rules will not down
Added by Jonathan Lee about 2 years ago.
Updated about 2 years ago.
Affected Plus Version:
21.05.1
Affected Architecture:
SG-2100
Description
Working with Bill on this today we found that *.so.rulea are not downloading into the rule set folder.
Files
usr/local/etc/snort/rules
Contains no so.rules on 2100 max anymore for some reason. No custom scrips used.
This is not a bug. This behavior is expected and per design.
The user has an SG-2100 MAX appliance which uses an ARM CPU. The Snort Shared Object (SO) rules are precompiled only for Intel AMD64 CPUs. They would not function on ARM hardware, and thus the package GUI code rightly does not copy them out of the rules archive.
Please work through these types of questions on a Netgate Forum thread before jumping to submit pointless bug reports. I was in the middle of a thread working through this with you, but you jumped out and submitted a spurious bug report. Here is the thread: https://forum.netgate.com/topic/184128/snort-and-paid-rule-subscriptions?_=1700145495355.
- Status changed from New to Not a Bug
Thanks I did not know that. So it has no code to work with ARM processors yet...
I should make this a feature request. Thanks sorry I did not know this.
Also available in: Atom
PDF