Snort will not start

Networking & Firewalls
1

I followed Toms video on installing snort on pfsense. It works til i do lan categories. As soon as I do that it trys to update rules and thats it. will not start. If i do rules as it is running it just stops. I cant find anything as to why.

2

looking through forums seems to be an issue after update. I will try and update snort should take of it. I hope >>>>>>>>>> NOPE all i get is a spinning gear

3

If you look in /var/log/snort/ you will find a directory with logs based on each interface and inside those logs is most likely the answer. Also, if you have questions about those logs don’t post a screenshot, post the contents that you think are relevant.

4

Thank you Tom I will look or try and look today and also Merry Christmas

5

just in the general system logs there is tons of these: |Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2758) appid metadata “flipkart” unknown.|
| — | — | — | — |
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2759) appid metadata “siteimprove” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2760) appid metadata “marketo” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2761) appid metadata “demandbase” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2762) appid metadata “info.com” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2763) appid metadata “revenuehits” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2764) appid metadata “guangming_onlin” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2765) appid metadata “china_daily” unknown.|
|Dec 23 19:08:10|snort|41506|WARNING: /usr/local/etc/snort/snort_13171_mvneta0.4091/rules/snort.rules(2766) appid metadata “people’s_daily” unknown.|

6

You need to look in the directory with the “Snort” then the interface name.