Re: Snort 3.1.18.0 on Ubuntu 18 & 20

There is so much wrong. You might try the Windows support site below.



Best regards,

Michael...



WINSNORT.com Management…

--

******************** Established ~ 2003 **********************

* FREE Windows Intrusion Detection System (WinIDS) Tutorials *

*            ~~ FREE Windows Support Forums ~~               *

*               Visit @ http://winsnort.com                  *

*     Snort: Open Source Network IDS - http://snort.org      *

**************************************************************





From: [email protected] <[email protected]>
Sent: Tuesday, March 21, 2023 6:31 AM
To: 'Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco)'
<[email protected]>; 'Michael Steele' <[email protected]>
Cc: [email protected]
Subject: RE: [Snort-users] Snort 3.1.18.0 on Ubuntu 18 & 20



Dear Team,



Please find the config file and help on this







Mukesh Kumar Jha

Ptronics ATM Services Pvt. Ltd.

Dwarka Sector - 12

New Delhi-110075

Mobile - 9555283158



From: Snort-users <[email protected]
<mailto:[email protected]> > On Behalf Of Vitalii
Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) via Snort-users
Sent: Tuesday, March 21, 2023 3:49 PM
To: Michael Steele <[email protected] <mailto:[email protected]> >
Cc: [email protected] <mailto:[email protected]>
Subject: Re: [Snort-users] Snort 3.1.18.0 on Ubuntu 18 & 20



Hi Michael, could you please attach your config and full log message(using
systemctl -l status snort3 for example)?

Thanks,
Vitalii!



From: Snort-users <[email protected]
<mailto:[email protected]> > on behalf of Michael Steele
<[email protected] <mailto:[email protected]> >
Date: Monday, 20 March 2023, 15:15
To: [email protected] <mailto:[email protected]>
<[email protected] <mailto:[email protected]> >
Subject: [Snort-users] Snort 3.1.18.0 on Ubuntu 18 & 20





I’m getting to the section “Enable the Snort systemD service and start
it:” in the guide and the error below happens. Not sure what I did wrong
but the install has been good up to this poing.



morpheus@Morpheus:~/snort_src/pulledpork3$ sudo systemctl enable snort3

morpheus@Morpheus:~/snort_src/pulledpork3$ sudo service snort3 start

morpheus@Morpheus:~/snort_src/pulledpork3$ service snort3 status

● snort3.service - Snort3 NIDS Daemon

     Loaded: loaded (/lib/systemd/system/snort3.service; enabled; vendor
preset: enabled)

     Active: failed (Result: signal) since Sun 2023-03-19 18:53:56 EDT; 5s
ago

    Process: 1666 ExecStart=/usr/local/bin/snort -c
/usr/local/etc/snort/snort.lua -s 65535 -k none -l /var/log/snort ->

   Main PID: 1666 (code=killed, signal=ABRT)

        CPU: 8.642s



Mar 19 18:53:56 Morpheus snort[1666]:   #9 0x564aec1a5844 in
_ZN5ACRun7executeER8AnalyzerPPv+0x14 (/usr/local/bin/snort>

Mar 19 18:53:56 Morpheus snort[1666]:   #10 0x564aec1a4a25 in
_ZN8Analyzer14handle_commandEv+0xa5 (/usr/local/bin/snort>

Mar 19 18:53:56 Morpheus snort[1666]:   #11 0x564aec1a504d in
_ZN8Analyzer7analyzeEv+0x3d (/usr/local/bin/snort @0x564a>

Mar 19 18:53:56 Morpheus snort[1666]:   #12 0x564aec1a5215 in
_ZN8AnalyzerclEP7Swappert+0xb5 (/usr/local/bin/snort @0x5>

Mar 19 18:53:56 Morpheus snort[1666]:   #13 0x7f5ae8d76de4 in
_ZNKSt10error_code23default_error_conditionEv+0x34 (/lib/>

Mar 19 18:53:56 Morpheus snort[1666]:   #14 0x7f5ae9a3a609 in
start_thread+0xd9 (/lib/x86_64-linux-gnu/libpthread.so.0 >

Mar 19 18:53:56 Morpheus snort[1666]:   #15 0x7f5ae8a61133 in clone+0x43
(/lib/x86_64-linux-gnu/libc.so.6 @0x7f5ae89420>

Mar 19 18:53:56 Morpheus systemd[1]: snort3.service: Main process exited,
code=killed, status=6/ABRT

Mar 19 18:53:56 Morpheus systemd[1]: snort3.service: Failed with result
'signal'.

Mar 19 18:53:56 Morpheus systemd[1]: snort3.service: Consumed 8.642s CPU
time.



morpheus@Morpheus:



Thanks…

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette