I have been running Packetfence3.6.1 now for 6 months.  It has worked 
flawlessly, however during the last 2 weeks snort will die.  This causes 
te /usr/local/pf/var/alert file to change from a pipe file

prw-r--r-- 1 root root to just -rw------- 1 pf root

Then when I restart pf, I get the dreaded FATAL - IDS alert pipe does 
not exist or unable to create it.
I delete the alert file and all is happy again.  This presents a 
problem when pf rotates the log files and can't restart due to the 
error.

I am digging through the scripts, but maybe somebody has a pointer to 
where I could just have it delete the alert file during the rotation to 
eliminate the issue.

I need to dig into why snort is dying, but at least the system will 
keep running.

Thanks

------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to