Project

General

Profile

Actions

Bug #1942

closed

snort_blocked.php loads blank

Added by Jonathan Bastin about 13 years ago. Updated about 12 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
10/09/2011
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

Once snort has a large amount of blocked hosts the page doesn't load and a view source shows no html at all. This is on 2.9 pkg Tue May 31 16:38:57 EDT 2011. I will be testing the PFsense v2.0 release this Wednesday.

Also on upgrade Barnyard 2 doesn't install and separate commands are needed to run such as /usr/local/bin/barnyard2 -f snort_46218_fxp0.u2 -u snort -g snort -c /usr/local/etc/snort/snort_46218_fxp0/barnyard2.conf -w /usr/local/etc/snort/snort_46218_fxp0/barnyard2.waldo -d /var/log/snort

Actions #1

Updated by Chris Buechler about 13 years ago

  • Project changed from pfSense to pfSense Packages
  • Category deleted (Unknown)
Actions #2

Updated by Chris Buechler about 13 years ago

  • Category set to Snort
Actions #3

Updated by tb o about 13 years ago

Blank Page happens also on pfsense 2.0 final at these URL
#blocked pages
/snort/snort_blocked.php

#alerts
/snort/snort_alerts.php

this is a serious issue, as you can only disable snort to be sure no false positive is blocked.
Also there is no way to clear the log. The buttons just dont work.

Actions #4

Updated by Seb A about 13 years ago

I've noticed that the snort_blocked.php page uses a lot of CPU in the php process. It takes a long time to render for me. I assume this is making links out of all the IP addresses. Maybe if the number of blocked hosts > 50 or 100 or so, it should not linkify the IP addresses, and just put up an input box at the bottom or top with the IP address you want to delete and a submit button. This may resolve the slow rendering time / [presumable] time-out.

Actions #5

Updated by Ermal Luçi over 12 years ago

  • Status changed from New to Resolved
Actions #6

Updated by Adam Gibson about 12 years ago

I am experiencing the same issue and curious where this was fixed. Is it in the beta version? I am currently running 2.0.1-RELEASE.

Actions

Also available in: Atom PDF