Good day. I am running OpenBSD 6.0 GENERIC.MP#2319 amd64 and have followed instructions from pkg-readmes for snort-2.9.8.2 and snort2pf-4.5p2.
I can verify snort & snort2pf running - # ps aux | grep snort _snort 45480 0.0 0.2 562640 14292 ?? Ss 8:38AM 0:00.42 /usr/local/bi root 21193 0.0 0.0 336 1252 p0 S+p 8:59AM 0:00.00 grep snort root 75674 0.0 0.1 4780 9980 C0- S 8:38AM 0:00.33 perl: snort2p Here is my table entry as per snort2pf README - # pfctl -sr | head -n 4 block drop in quick on re0 from <block-list> to any block drop in quick on re0 from <badguys> to any block drop in quick from <snort2pf> to any block drop quick from <bruteforce> to any When I try to check entries in snort2pf with 'pfctl -t snort2pf -T show' it says table does not exist. # pfctl -t snort2pf -T show pfctl: Table does not exist. Even if the entries are 0 in snort2pf table there shouldn't be an error like table does not exist. Please let me know whether it is a default behaviour of the program or I messed it up.
