SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0001043: snort: freezes the machine sometimes when snort is enabled on green interface - MantisBT Endian Bugtracker
Endian Issue Tracker





Please see now our new Bugtracker system: JIRA








View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001043Endian FirewallOther Servicespublic2008-06-30 13:422009-10-13 17:20
Reporterpeter-endian 
Assigned To 
PrioritynormalSeverityblockReproducibilitysometimes
StatusclosedResolutionsuspended 
PlatformOSOS Version
Product Version2.2-rc1 
Target VersionFixed in Version 
Summary0001043: snort: freezes the machine sometimes when snort is enabled on green interface
Descriptionsnort freezes the machine sometimes when it is enabled also on the green interface.
some sort of traffic which is causing this (?)

happens also on lukas viennae machine
Tagsheavy
Attached Files

- Relationships
child of 0001927confirmed Reports to be checked - collecting ticket 

-  Notes
(0001408)
Anonymous (viewer)
2008-07-03 17:02

To debug this problem, iptables rules like the following one need to be added for all Endian Network ports, so the firewall is still accessible from Endian Network.

iptables -A SNORT -p tcp --dport 22 -i br0 -j RETURN

(0001487)
luca-endian (developer)
2008-07-30 15:31

I've noted that if you kill snort nothing pass through the interface.
It's related to inline mode because snort take packets from the ip_queue of iptable.
This could cause an efw freezing? Maybe after an unexpected exit of Snort process.
(0001561)
peter-endian (administrator)
2008-08-29 16:31

could be this:
http://www.nabble.com/Snort:-emerging-scan.rules-FAULTY-td19215999.html [^]

- Issue History
Date Modified Username Field Change
2008-06-30 13:42 peter-endian New Issue
2008-07-03 17:02 Anonymous Note Added: 0001408
2008-07-03 17:02 Anonymous Status new => feedback
2008-07-24 16:05 ra-endian Target Version 2.2-rc2 => 2.2-rc3
2008-07-30 15:31 luca-endian Note Added: 0001487
2008-08-01 10:10 peter-endian Tag Attached: heavy
2008-08-27 19:50 peter-endian Target Version 2.2-rc3 =>
2008-08-29 16:31 peter-endian Note Added: 0001561
2009-06-09 19:52 peter-endian Relationship added child of 0001927
2009-10-13 17:20 peter-endian Status feedback => closed
2009-10-13 17:20 peter-endian Resolution open => suspended

Copyright © 2005-2008 Endian, SRL. All rights reserved.


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker