-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 So if I understand what you're saying here it sounds like we need to investigate the way sebekd, on the honeywall, receives sebek client data.
If anyone can produce pcap data that can be fed through a roo to reproduce this it might speed things up. In the mean time I'll try to get someone with sebek clue to look into this. Parvinder, Can you reproduce the above scenario (uninstall sebek clients and see if things work again) maybe with a restart in between? Thanks for the feedback! Earl On Fri, 02 Nov 2007 04:26:44 -0400 [EMAIL PROTECTED] wrote: >Parvinder, > >I was facing the same problems some weeks ago. After uninstalling > >Sebek on my honepots, the honeywall (version 1.2) started logging > >again. Maybe this solves your issue as well. > >Best regards, > >Stefan > >> Rob, >> >> I applied your fix about the wait_timeout on the my.cnf file but >it >> doesn't work. After running for couple of hours and reporting >the >> walleye is no longer reporting anything. Let me know if you >want to >> test something else. As you can see right after 19th and 20th >hour >> there is nothing and at this time I was hitting the network with >pen >> test traffic. Hope this helps in fixing issue. Another issue is >sebek >> reporting on roo 1.2. Issue is, it doesn't report anything. >Well >> maybe it does but walleye is not showing anything. :) >> >> >> -Parvinder Bhasin >> >> Rob McMillen wrote: >>> List, >>> Was wondering if anyone else has had luck or lack there of >with >>> this issue. I've had a honeywall running now for a while and I >am >>> still seeing data in the UI once I increased the wait_timeout >of the >>> db. So far, we have one other that seems to have memory usage >>> issues... anyone else? >>> >>> Thanks in advance, >>> >>> Rob >>> _______________________________________________ >>> Honeywall mailing list >>> [email protected] >>> https://public.honeynet.org/mailman/listinfo/honeywall >>> > > >_______________________________________________ >Honeywall mailing list >[email protected] >https://public.honeynet.org/mailman/listinfo/honeywall -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Charset: UTF8 Version: Hush 2.5 wkYEARECAAYFAkcqbKsACgkQk7+e+4lPSm0gkQCfXsFNZxifwvaTr728Jdxr/PtWLpQA oLazqQx+d8r8d2UiPmoOSdH35+cO =Zjk+ -----END PGP SIGNATURE----- _______________________________________________ Honeywall mailing list [email protected] https://public.honeynet.org/mailman/listinfo/honeywall
