snort3 exited when pulledpork3 refresh data

Hello,

I have installed snort3 with pulledpork3 with instruction from
https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/012/147/original/Snort_3.1.8.0_on_Ubuntu_18_and_20.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMJQBJPARJ%2F20221129%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20221129T090404Z&X-Amz-Expires=172800&X-Amz-SignedHeaders=host&X-Amz-Signature=23d3468de323ba69ec8cdbc8d6a9d083c86c695660eaf1367fe5baba90a94180

I added snort3 and pulledpork3 to systemd unit files as services and also
with pulledpok3.timer.
Problem is that when I run pulledpork3 it will always send signal to reload
snort3 but instead of reload it always got fatal and snort3 process stop.

Journal logs from pulledpork3:
"
Nov 30 16:04:43 example pulledpork.py[1223834]: Writing rules to:
 /usr/local/etc/rules/pulledpork.rules
Nov 30 16:04:43 example pulledpork.py[1223834]: Writing blocklist file to:
 /usr/local/etc/lists/default.blocklist
Nov 30 16:04:43 example pulledpork.py[1223834]: Sending Snort process the
reload signal (PID 1223652).
Nov 30 16:04:43 example pulledpork.py[1223834]: WARNING: Error sending
SIGHUP to Snort3 process: [Errno 3] No such process
Nov 30 16:04:43 example systemd[1]: pulledpork3.service: Main process
exited, code=exited, status=255/EXCEPTION
Nov 30 16:04:43 example systemd[1]: pulledpork3.service: Failed with result
'exit-code'.
Nov 30 16:04:43 example systemd[1]: Failed to start Runs PulledPork3 to
update Snort 3 Rulesets.
Nov 30 16:04:43 example systemd[1]: pulledpork3.service: Consumed 2.104s
CPU time.
"

Journal logs from snort3:
"
Nov 30 16:04:42 example snort[1223652]: Snort (PID 1223652) caught fatal
signal: SIGSEGV (11)
Nov 30 16:04:42 example snort[1223652]: Version: 3.1.18.0
Nov 30 16:04:42 example snort[1223652]: Backtrace:
Nov 30 16:04:42 example snort[1223652]:   #0 0x7f6c6a085400 in
_ZL4evalPvR6CursorPN5snort6PacketE+0xa0
Nov 30 16:04:42 example systemd[1]: snort3.service: Main process exited,
code=killed, status=11/SEGV
Nov 30 16:04:42 example systemd[1]: snort3.service: Failed with result
'signal'.
Nov 30 16:04:42 example systemd[1]: snort3.service: Consumed 18.906s CPU
time.
"

I tested it when snort3 is running in one process or using multithread with
option "-z" but it behaves same and snort3 always stops.


Running installation at ubuntu20.04LTS server.
Snort3 Version: 3.1.18.0
PuledPork Version: v3.0.0.4

Thank you for any help.

-- 
S pozdravom
With kind regards,
jacomo77

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette