Bug #1942
closed
snort_blocked.php loads blank
Added by Jonathan Bastin about 13 years ago.
Updated almost 12 years ago.
Description
Once snort has a large amount of blocked hosts the page doesn't load and a view source shows no html at all. This is on 2.9 pkg Tue May 31 16:38:57 EDT 2011. I will be testing the PFsense v2.0 release this Wednesday.
Also on upgrade Barnyard 2 doesn't install and separate commands are needed to run such as /usr/local/bin/barnyard2 -f snort_46218_fxp0.u2 -u snort -g snort -c /usr/local/etc/snort/snort_46218_fxp0/barnyard2.conf -w /usr/local/etc/snort/snort_46218_fxp0/barnyard2.waldo -d /var/log/snort
- Project changed from pfSense to pfSense Packages
- Category deleted (
Unknown)
Blank Page happens also on pfsense 2.0 final at these URL
#blocked pages
/snort/snort_blocked.php
#alerts
/snort/snort_alerts.php
this is a serious issue, as you can only disable snort to be sure no false positive is blocked.
Also there is no way to clear the log. The buttons just dont work.
I've noticed that the snort_blocked.php page uses a lot of CPU in the php process. It takes a long time to render for me. I assume this is making links out of all the IP addresses. Maybe if the number of blocked hosts > 50 or 100 or so, it should not linkify the IP addresses, and just put up an input box at the bottom or top with the IP address you want to delete and a submit button. This may resolve the slow rendering time / [presumable] time-out.
- Status changed from New to Resolved
I am experiencing the same issue and curious where this was fixed. Is it in the beta version? I am currently running 2.0.1-RELEASE.
Also available in: Atom
PDF