Project

General

Profile

Actions
Copy link

Bug #16656

closed

Suricata 7.0.8_5 - UI frontend crash while opening "Blocks" page

Added by Ivan Bobyr about 1 month ago. Updated 19 days ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Suricata
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
Affected Architecture:
amd64

Description

Crash report begins. Anonymous machine information:

amd64
15.0-CURRENT
FreeBSD 15.0-CURRENT #21 RELENG_2_8_1-n256095-47c932dcc0e9: Thu Aug 28 16:27:48 UTC 2025 :/var/jenkins/workspace/pfSense-CE-snapshots-2_8_1-main/obj/amd64/AupY3aTL/var/jenkins/workspace/pfSense-CE-

Crash report details:

PHP Errors:
[21-Jan-2026 13:10:16 Asia/Tashkent] PHP Fatal error: Uncaught ValueError: date_create_from_format(): Argument #2 ($datetime) must not contain any null bytes in /usr/local/www/suricata/suricata_blocked.php:331
Stack trace:
#0 /usr/local/www/suricata/suricata_blocked.php(331): date_create_from_format()
#1 {main}
thrown in /usr/local/www/suricata/suricata_blocked.php on line 331
[21-Jan-2026 13:11:29 Asia/Tashkent] PHP Fatal error: Uncaught ValueError: date_create_from_format(): Argument #2 ($datetime) must not contain any null bytes in /usr/local/www/suricata/suricata_blocked.php:331
Stack trace:
#0 /usr/local/www/suricata/suricata_blocked.php(331): date_create_from_format()
#1 {main}
thrown in /usr/local/www/suricata/suricata_blocked.php on line 331

No FreeBSD crash data found.

Files

PHP_errors(1).log (1.12 KB) PHP_errors(1).log Ivan Bobyr, 01/21/2026 08:27 AM
Actions
Copy link
 #1

Updated by Ivan Bobyr about 1 month ago

PFSENSE ========
2.8.1-RELEASE (amd64)
built on Tue Sep 9 21:29:00 +05 2025
FreeBSD 15.0-CURRENT

Actions
Copy link
 #2

Updated by Marcos M 28 days ago

  • Status changed from New to Closed
  • Priority changed from Urgent to Normal

The error indicates there was an issue in the /var/log/suricata/*block.log file(s). The timestamp string contained malformed data which could not be parsed. There's already code to gracefully handle this exception. Make sure to update to the latest Suricata package version.

Actions
Copy link
 #3

Updated by Ivan Bobyr 19 days ago

There're some issues with immediate fixing the problem. The pfSense's port applies some patches the original sources, and simply to rebuild the "suricata" binary alone (without the pfSense's "libpfctl.so" etc dependencies) doesn't works - starting the "suricata" service fails on dynamic linking (to "libjansson.so.4")

The below build script builds well but the built "suricata" binary is unusable on the working router (x86_64 PC) ==============================
#!/bin/sh

  1. The sources: https://www.openinfosecfoundation.org/download/suricata-7.0.14.tar.gz

./configure \
--prefix=/usr/local \
--sysconfdir=/usr/local/etc \
--localstatedir=/var \
--datarootdir=/usr/local/share \
--disable-gccmarch-native \
--enable-gccprotect=yes \
--enable-bundled-htp \
--enable-geoip=yes \
--enable-netmap=yes \
--enable-ipfw \
--enable-ipfw \
--enable-luajit \
--enable-rust \
--enable-hiredis

DEST=/tmp/suricata-7.0.14
make clean
make -j $(sysctl -n hw.ncpu)
mkdir -p $DEST
rm -rvf $DEST/*
make install-strip DESTDIR=$DEST

Actions
Copy link

Also available in: Atom PDF