Tim,
There is a bug with snort & suricata starting.
You can patch your install with the following.
cd /usr/local/pf
curl
https://github.com/inverse-inc/packetfence/compare/packetfence-4.1.0...9c0899990e486281472e366576fcba101563b876.diff
> pf.diff
patch -p1 < pf.diff
James Rouzier
[email protected] :: +1.514.755.3630 :: http://www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://www.packetfence.org)
On 12/12/2013, 11:43 AM, Palmer, Tim wrote:
James,
Excellent
Yes, I did see the note about memcached in the notes, and yes I forgot
to remove from chkconfig. Solved
[root@pf-test conf]# grep '^snort' /usr/local/pf/conf/pf.conf
[root@pf-test conf]#
So, nothing.
tim
From: James Rouzier <[email protected] <mailto:[email protected]>>
Reply-To: <[email protected]
<mailto:[email protected]>>
Date: Thu, 12 Dec 2013 11:34:09 -0500
To: <[email protected]
<mailto:[email protected]>>
Subject: Re: [PacketFence-users] 4.1 upgrade
Tim,
Memcached should not be managed by the system any more.
Do the following
service memcached stop
killall memcached #for good measure
chkconfig --del memcached
/usr/local/pf/bin/pfcmd service memcached start
For the detection issue can you show me the following.
grep '^snort' /usr/local/pf/conf/pf.conf
Let me know if this helps.
Thanks
James Rouzier
[email protected] :: +1.514.755.3630 ::http://www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://www.packetfence.org)
On 12/12/2013, 11:09 AM, Palmer, Tim wrote:
After getting past the Linux::FD issue, which I suspect is my own yum
problem somehow, my upgrade seems to be in decent shape (yes, you
really must run the db schema update if you want access to anything).
However, having detect enable issues.
* Snort was starting fine on 4.0.6_2
* Detection is enabled
o [root@pf-test pf]# grep '^detect' conf/pf.conf
o detection=enabled
* An interface is set as monitor
o grep '^type=mon' conf/pf.conf
o type=monitor
* Web interface Status:Services doesn't show snort at all
* bin/pfcmd service pf status agrees
o snort|0|0
So, apparently I have detection disabled, but I think I have it
enabled. Hints?
Also, memcached dies immediately.
And apparently I don't understand changes in the portal profiles, as
none of my Internal Users Sources aren't being checked. I still have
more to check before worrying too much about this.
A fine day to you,
Tim
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most
IT organizations don't have a clear picture of how application
performance affects their revenue. With AppDynamics, you get 100%
visibility into your Java,.NET, & PHP application. Start your 15-day
FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk_______________________________________________
PacketFence-users mailing list [email protected]
<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
