I wanted to install Snort 2.9.7.0-3 from the official Raspbian Jessie Repository, but it keeps giving me an error at "Setting up snort (2.9.7.0-3) ... "
* Raspberry Pi Model B
* Raspbian Jessie (upgraded from a fresh/ clean official image "Raspbian Wheezy")
* everything updated, upgraged and firmware updated
* nothing else installed
/etc/apt/sources.list
Code: Select all
deb http://mirrordirector.raspbian.org/raspbian/ jessie main contrib non-free rpi
Code: Select all
sudo apt-get clean
sudo apt-get update
sudo apt-get upgrade
sudo apt-get install snort
...everything works good till this error shows up:
Code: Select all
Setting up snort (2.9.7.0-3) ...
Job for snort.service failed. See 'systemctl status snort.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript snort, action "start" failed.
dpkg: error processing package snort (--configure):
subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
snort
E: Sub-process /usr/bin/dpkg returned an error code (1)
Code: Select all
root@raspberrypi:/home/pi# systemctl status snort.service
● snort.service - LSB: Lightweight network intrusion detection system
Loaded: loaded (/etc/init.d/snort)
Active: failed (Result: exit-code) since Wed 2015-04-01 20:38:56 CEST; 1min 50s ago
Process: 5764 ExecStart=/etc/init.d/snort start (code=exited, status=1/FAILURE)
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(134) GID 1 SID 100000549 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(135) GID 1 SID 100000550 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(136) GID 1 SID 100000551 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(137) GID 1 SID 100000552 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(138) GID 1 SID 100000553 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(139) GID 1 SID 100000554 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(140) GID 1 SID 100000555 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(141) GID 1 SID 100000556 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(142) GID 1 SID 100000557 in rule...d rule
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(143) GID 1 SID 100000558 in rule...d rule
Apr 01 20:38:56 raspberrypi systemd[1]: snort.service: control process exited, code=exited status=1
Apr 01 20:38:56 raspberrypi systemd[1]: Failed to start LSB: Lightweight network intrusion detection system.
Apr 01 20:38:56 raspberrypi systemd[1]: Unit snort.service entered failed state.
Hint: Some lines were ellipsized, use -l to show in full.
Code: Select all
root@raspberrypi:/home/pi# journalctl -xn
-- Logs begin at Wed 2015-04-01 18:23:38 CEST, end at Wed 2015-04-01 20:38:56 CEST. --
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(137) GID 1 SID 100000552 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(138) GID 1 SID 100000553 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(139) GID 1 SID 100000554 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(140) GID 1 SID 100000555 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(141) GID 1 SID 100000556 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(142) GID 1 SID 100000557 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:38 raspberrypi snort[5772]: WARNING: /etc/snort/rules/community-web-php.rules(143) GID 1 SID 100000558 in rule duplicates previous rule. Ignoring old rule.
Apr 01 20:38:56 raspberrypi systemd[1]: snort.service: control process exited, code=exited status=1
Apr 01 20:38:56 raspberrypi systemd[1]: Failed to start LSB: Lightweight network intrusion detection system.
-- Subject: Unit snort.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit snort.service has failed.
--
-- The result is failed.
Apr 01 20:38:56 raspberrypi systemd[1]: Unit snort.service entered failed state.
Any ideas?
