[7.920][BUG][FIXED] IPS stuck in a loop and won't stop loading.

Just adding some information on my condition. Its obvious that IPS is broken in this version. My IPS keeps on trying to reload although its turned off via webadmin. I did turn it on initially and had lost connectivity but now it just keeps on running.

Tried /var/mdw/scripts/snort stop and get done but in IPS log I can see where it is constantly reloading
A few snippets

2010:06:02-15:34:54 gatekeeper snort[9055]: Enabling inline operation

2010:06:02-15:34:54 gatekeeper snort[9055]: NFQUEUE ID set to: 0

2010:06:02-15:34:54 gatekeeper snort[9055]: Running in IDS mode

2010:06:02-15:34:54 gatekeeper snort[9055]: 

2010:06:02-15:34:54 gatekeeper snort[9055]:         --== Initializing Snort ==--

2010:06:02-15:34:54 gatekeeper snort[9055]: Initializing Output Plugins!

and after a few more lines, I get

2010:06:02-15:35:16 gatekeeper snort[9055]: WARNING: Invalid content option in shared object rule: gid:3, sid:13476 : Fast pattern offset and length cannot be greater than the length of the pattern.  Rule will not be registered.

2010:06:02-15:35:16 gatekeeper snort[9055]: WARNING: gid:3, sid:15470. Fast pattern "only" flag used in combination with a fast pattern offset,length - honoring "only" flag and ignoring fast pattern offset,length.

and it continues on. I however never loose connectivity luckily [;)] Will probably reboot.

Regards

Parents

0 Scott_Klassen over 15 years ago

Bit the bullet and followed BillyBob's lead.

1)  created backup and downloaded to PC
2)  Installed fresh from ISO
3)  restore backup

IPS works fine after that.  There was something definately wonky with the U2D.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Scott_Klassen over 15 years ago

Bit the bullet and followed BillyBob's lead.

1)  created backup and downloaded to PC
2)  Installed fresh from ISO
3)  restore backup

IPS works fine after that.  There was something definately wonky with the U2D.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 mos4567 over 15 years ago in reply to Scott_Klassen

dito, clean install with 7.920 ISO, all smooth sailing, seems up2date **might** need to get looked at and adjusted, I mean IDK, it could be just an error in the package it's self or it could be some little kink in up2date... it will take somebody who knows more about this stuff then I do to figure that part out, GL guys I hope you squash it if there is a bug.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[7.920][BUG][FIXED] IPS stuck in a loop and won't stop loading.

Submitted a Tech Support Case lately from the Support Portal?