Project

General

Profile

Actions

Bug #370

closed

SNORT mixes up interfaces

Added by Henrik Kaare Poulsen over 15 years ago. Updated about 15 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
02/21/2010
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

Snapshot pfSense-2.0-BETA1-20100217-2217

I have two interfaces:
WAN: em0
LAN: xl0

I have created "Snort Interface" first for WAN, then for LAN.
(Global settings with basic oinkmaster codes plus emergingthreads)

Startup of SNORT fixed as per workaround in http://redmine.pfsense.org/issues/show/369.

System log now shows:
pfsense snort63438: FATAL ERROR: Unable to open rules file "/usr/local/etc/snort/snort_0em0/snort.conf": No such file or directory.
pfsense snort63765: FATAL ERROR: Unable to open rules file "/usr/local/etc/snort/snort_1xl0/snort.conf": No such file or directory.

ls /usr/local/etc/snort/ shows those subdirectories:
- snort_0xl0
- snort_1em0

I assume that the first digit after "snort_" is some kind of sequence number.

However, something is mixed up, as the actual directory names are not as expected.

Actions #1

Updated by Chris Buechler about 15 years ago

  • Status changed from New to Resolved

fixed

Actions

Also available in: Atom PDF