suricata failing (given up, old, not-relevant anymore)

[Noci]

I am exploring what suits my needs, and IDS (suricata) just doesn't work...

When logging on the command line, running suricate tells libnetmap.so.5 is missing.
Also there seems to be no library libnetmap to be available to install.

This was a fresh install from ISO + update.

opnsense is 21.7.6
suricata is 6.0.4

root@OPNsense:~ # suricata
ld-elf.so.1: Shared object "libnetmap.so.5" not found, required by "suricata"

[franco]

I suspect health audit will tell you the base/kernel versions are incorrect.


Cheer,
Franco

[Julien]

I suspect health audit will tell you the base/kernel versions are incorrect.


Cheer,
Franco

Hi Franco. for me the same its crashes and i have to start it manually from time to time.
how can i troubleshoot it ?

[franco]

It's not the same issue. If the author would post the health audit result you could compare.


Cheers,
Franco

[Julien]

It's not the same issue. If the author would post the health audit result you could compare.


Cheers,
Franco

thank you for your answer.

where can i find those health audit result ?

[franco]

I'm neither seeing the author's results nor yours. I'm assuming the author doesn't have libnetmap libraries installed (partial update) and for you it's all there. That's as far as I'm willing to go.


Cheers,
Franco

[Julien]

I'm neither seeing the author's results nor yours. I'm assuming the author doesn't have libnetmap libraries installed (partial update) and for you it's all there. That's as far as I'm willing to go.


Cheers,
Franco

well what can i say,
thanks anyway

[franco]

You could say "here's my health audit output" and attach the health audit output.

Then I can say: look, there's no problem there.

And then we can both move on?


Cheers,
Franco

[FullyBorked]

Feel like we are gatekeeping somewhat.  No instructions for performing the audit.  No big deal some folks are new and just don't know yet.  Please run this audit and post the results to this thread. 

To run the audit:

• System > Firmware > Status
• Run an audit (buttom at bottom)
• Select health from dropdown.

[franco]

I agree when looking at this thread in isolation, but in general there's documentation for this.

https://docs.opnsense.org/troubleshooting.html


Cheers,
Franco

[Julien]

You could say "here's my health audit output" and attach the health audit output.

Then I can say: look, there's no problem there.

And then we can both move on?


Cheers,
Franco

i already moved on bro,
i've been asking i dont know to find the logs and you anser is 

Code Select Expand

That's as far as I'm willing to go.
if i knew how i would of done it without bothering you with my questions.
i remember pfsense start showing this attitude like those answer on theirs forum,
we support the project from day one, we buy the hardware / we call for support and we pay to support the project.


the below is a normal and polite answer.

Feel like we are gatekeeping somewhat.  No instructions for performing the audit.  No big deal some folks are new and just don't know yet.  Please run this audit and post the results to this thread. 

To run the audit:

• System > Firmware > Status
• Run an audit (buttom at bottom)
• Select health from dropdown.

Thank you Fully

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 21.7.6 (amd64/OpenSSL) at Tue Dec 14 17:32:33 CET 2021
>>> Check installed kernel version
Version 21.7.5 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 21.7.5 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 66 dependencies to check.
Checking packages: .................................................................... done
***DONE***

[franco]

Yes, no problem in your system files so this thread is for a different issue.


Cheers,
Franco

[Julien]

I agree when looking at this thread in isolation, but in general there's documentation for this.

https://docs.opnsense.org/troubleshooting.html


Cheers,
Franco

i feel like i hijacked someone else post. i am sorry about this.

[Noci]

After thought.. after seeing non-movement on this issue after a week i gave up on it (OpnSense) then.
As being no alternative for what i had then.

Looking into OpnSense again, this issue is closed.