OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: Rout3rx on June 02, 2017, 10:26:48 am

Title: IDS ruleset crash
Post by: Rout3rx on June 02, 2017, 10:26:48 am

Hi
after download most of the ruleset of suricata, at the rule tab it stay on loading.... and not happend...
please tell me how can i fix this?
thanks

Title: Re: IDS ruleset crash
Post by: Rout3rx on June 02, 2017, 12:39:59 pm

sorry
everything has been solved by upgrade.

Title: Re: IDS ruleset crash
Post by: Rout3rx on June 04, 2017, 06:08:25 am

no! after 2 days the problem occured again! what can i do to fix?

Title: Re: IDS ruleset crash
Post by: Rout3rx on June 04, 2017, 06:10:29 am

configd.py: [db09ab6b-c97e-4a58-94f8-0e8cb0525be8] Script action failed with Command '/usr/local/opnsense/scripts/suricata/queryInstalledRules.py /limit "10" /offset "0" /filter " installed_action/drop " /sort_by "sid"' returned non-zero exit status 1 at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 477, in execute stdout=output_stream, stderr=error_stream) File "/usr/local/lib/python2.7/subprocess.py", line 541, in check_call raise CalledProcessError(retcode, cmd) CalledProcessError: Command '/usr/local/opnsense/scripts/suricata/queryInstalledRules.py /limit "10" /offset "0" /filter " installed_action/drop " /sort_by "sid"' returned non-zero exit status 1

Title: Re: IDS ruleset crash
Post by: phoenix on June 04, 2017, 08:00:46 am

I haven't seen any mention of which release of OPNsense you're using (you should always give this information) but you've posted this in the 17.7 Alpha forum - is that the version you're using and if not, which version?

Title: Re: IDS ruleset crash
Post by: Rout3rx on June 04, 2017, 08:58:20 am

i'm using ver 17.1.8   release date : 2017-06-01
i am on the latest upgrade, how can i move to 17.7?

Title: Re: IDS ruleset crash
Post by: AdSchellevis on June 04, 2017, 11:27:49 am

You don't need to upgrade, there's nothing different for this function in 17.7 if I'm not mistaken.
It looks like a call from the gui went wrong, but configd doesn't provide a lot of details about the actual issue here.

Can you run the following on your setup (in a ssh session/console) and report the output?

Code: [Select]

/usr/local/opnsense/scripts/suricata/queryInstalledRules.py /limit "10" /offset "0" /filter " installed_action/drop " /sort_by "sid"


Title: Re: IDS ruleset crash
Post by: samiam222 on August 31, 2017, 06:04:51 am

Disable ET open/emerging-trojan and it might go away. It did for me after some process of elimination work.