When pf generated the file root owned it. Even with a chown pf:pf suricata
won't connect to it. :/
On Jun 27, 2013 4:12 PM, "Derek Wuelfrath" <[email protected]> wrote:
> I do see when I run ls -l /usr/local/pf/var that alert is a FIFO file
> owned by root. Should it be owned by root?
>
>
> Should be owned by the same user that suricata is running from (i think
> it's pf)
>
> Cheers!
> dw.
>
> --
> [email protected] :: +1.514.447.4918 (x110) :: www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
> On 2013-06-27, at 11:55 AM, Brian Lucas <[email protected]> wrote:
>
> Gentlemen,
>
> pfdetect is running and not showing any errors in pf/logs/pfdetect
> suricata is running however in /var/log/suricata.log i see the following
> error:
> 27/6/2013 -- 04:16:06 - <Error> - [ERRCODE: SC_ERR_SOCKET(200)] - Error
> connecting to socket "/usr/local/pf/var/alert": Connection refused
>
> /usr/local/pf/var/alert is being generated at startup and I confirmed this
> by shutting down packetfence and deleting the file, then restarting
> packetfence with service packetfence start.
>
> I do see when I run ls -l /usr/local/pf/var that alert is a FIFO file
> owned by root. Should it be owned by root?
>
> I am really at a loss as to how to solve this problem and need suricata up
> and running to get this setup finally up and running. Any help would be
> appreciated in solving this latest issue. I'm also sitting in IRC for a
> bit as sacul if anyone wants to drop in there.
>
> Brian
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
>
> http://p.sf.net/sfu/windows-dev2dev_______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
