Removal from the shell? Not sure how to go about that using pfsense (since pfsense is a hacked freebsd system), but you may want to disable snort and then remove it via the webgui. Not sure what the bpf state is (can't find any documents off-hand about it), but I'll inquire on the freebsd-net list to see if anyone else knows what it is. - -Garrett
Yeah, I can't find anything either, and I already had removed it from using the GUI ages ago. It just kind of resurfaced for no apparent reason.
Kinda stumped. Mike
