Feature #14997
closed
Feature Request: Snort *.so.rules should also function on ARM architecture processors
0%
Description
I just learned that *.so.rules or shared object rules do not function on ARM architecture appliances.
The SG-2100 is an ARM architecture system.
Can we please have some updates to support the ARM processors?
Files
| Screenshot 2023-11-15 at 3.53.39 PM.png (546 KB) Screenshot 2023-11-15 at 3.53.39 PM.png | ARM architecture family processors show SO but have no rules |
Updated by Bill Meeks about 2 years ago
The SO rules are not available on ARM hardware because the Snort Vulnerability Research Team does not produce the pre-compiled SO rules for that platform. They produce rules for several different operating system types, but all are for Intel AMD64 hardware only.
pfSense can only use what is provided from upstream. Several of the SO rules are considered proprietary and are closed-source for privacy/security reasons. They are only offered in pre-compiled binary library form packaged into the regular Snort VRT rules archive package, but only for Intel CPU platforms.
Updated by 