IDS ruleset crash

[Rout3rx]

Hi
after download most of the ruleset of suricata, at the rule tab it stay on loading.... and not happend...
please tell me how can i fix this?
thanks

[Rout3rx]

sorry
everything has been solved by upgrade.

[Rout3rx]

no! after 2 days the problem occured again! what can i do to fix?

[Rout3rx]

configd.py: [db09ab6b-c97e-4a58-94f8-0e8cb0525be8] Script action failed with Command '/usr/local/opnsense/scripts/suricata/queryInstalledRules.py /limit "10" /offset "0" /filter " installed_action/drop " /sort_by "sid"' returned non-zero exit status 1 at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 477, in execute stdout=output_stream, stderr=error_stream) File "/usr/local/lib/python2.7/subprocess.py", line 541, in check_call raise CalledProcessError(retcode, cmd) CalledProcessError: Command '/usr/local/opnsense/scripts/suricata/queryInstalledRules.py /limit "10" /offset "0" /filter " installed_action/drop " /sort_by "sid"' returned non-zero exit status 1

[phoenix]

I haven't seen any mention of which release of OPNsense you're using (you should always give this information) but you've posted this in the 17.7 Alpha forum - is that the version you're using and if not, which version?

[Rout3rx]

i'm using ver 17.1.8   release date : 2017-06-01
i am on the latest upgrade, how can i move to 17.7?

[AdSchellevis]

You don't need to upgrade, there's nothing different for this function in 17.7 if I'm not mistaken.
It looks like a call from the gui went wrong, but configd doesn't provide a lot of details about the actual issue here.

Can you run the following on your setup (in a ssh session/console) and report the output?

Code: [Select]

/usr/local/opnsense/scripts/suricata/queryInstalledRules.py /limit "10" /offset "0" /filter " installed_action/drop " /sort_by "sid"


[samiam222]

Disable ET open/emerging-trojan and it might go away. It did for me after some process of elimination work.