Re: snort 3 actived fpr1010

chocolate2395777 · ‎10-19-2023

Hi All,

I have upgraded the FPR1010 version from 7.0.0 to 7.3.1.1 and changed from snort 2 to snort 3.

However, I have experienced the snort 3 keep crashing like the image below:

+

Sometimes it shows snort is down.

As you can see the snort 3 Performance statistics keep up and down.

Is there anything I can troubleshoot?

Thanks

Charyl

marce1000 · ‎10-20-2023

- FYI : https://bst.cloudapps.cisco.com/bugsearch?pf=prdNm&kw=The%20Primary%20Detection%20Engine%20process%20terminated&bt=custV&sb=anfr

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Marius Gunnerud · ‎10-20-2023

This sounds like very buggy behaviour. I would suggest opening a case with TAC to troubleshoot further. If this is critical and causing network outage, downgrade to SNORT2 and open a TAC case to troubleshoot.

--
Please remember to select a correct answer and rate helpful posts

Marvin Rhoads · ‎10-20-2023

If the firewall is new and mostly unconfigured, I would recommend version 7.2.5 instead of 7.3.1.1.

7.3.x is a short term release and doesn't benefit from the many bug fixes built into the 7.2.4+ train, which is a long term release.