yesterday (sunday) at 3 am SNORT stopped to work with the result that internal nets couldn't reach Internet anymore. In the logs I found
FATAL ERROR: Failed to load /usr/lib/snort/so_rules//file-java.so: /usr/lib/snort/so_rules//file-java.so: file too short
Disabling IPS gave Internet back to local nets. No need to say that nothing was done at UTM level since weeks.
If someone had an idea on why does this suddenly happened, what does it mean, and finally how to solve it.
This thread was automatically locked due to age.