James,
Excellent, sir
Applied to two test centos 6.5 boxes – one is a new install, the other is
upgraded from 4.0.6 (which was upgraded from 4.0.5)
Same results on both.
Pfcmd service pf status, ps and ls var/run/snort* all agree snort is running
Web interface sees it as stopped.
Permissions/ownership?
Ls -l /usr/local/pf/var/run/snort*
-rw------- 1 root root 5 Dec 12 15:52 /usr/local/pf/var/run/snort_eth1.pid
-rw------- 1 root root 0 Dec 12 15:52 /usr/local/pf/var/run/snort_eth1.pid.lck
Thanks!
tim
From: James Rouzier <[email protected]<mailto:[email protected]>>
Reply-To:
<[email protected]<mailto:[email protected]>>
Date: Thu, 12 Dec 2013 15:09:50 -0500
To:
<[email protected]<mailto:[email protected]>>
Subject: Re: [PacketFence-users] 4.1 upgrade
Tim,
There is a bug with snort & suricata starting.
You can patch your install with the following.
cd /usr/local/pf
curl
https://github.com/inverse-inc/packetfence/compare/packetfence-4.1.0...9c0899990e486281472e366576fcba101563b876.diff
> pf.diff
patch -p1 < pf.diff
James Rouzier
[email protected]<mailto:[email protected]> :: +1.514.755.3630 ::
http://www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://www.packetfence.org)
On 12/12/2013, 11:43 AM, Palmer, Tim wrote:
James,
Excellent
Yes, I did see the note about memcached in the notes, and yes I forgot to
remove from chkconfig. Solved
[root@pf-test conf]# grep '^snort' /usr/local/pf/conf/pf.conf
[root@pf-test conf]#
So, nothing.
tim
From: James Rouzier <[email protected]<mailto:[email protected]>>
Reply-To:
<[email protected]<mailto:[email protected]>>
Date: Thu, 12 Dec 2013 11:34:09 -0500
To:
<[email protected]<mailto:[email protected]>>
Subject: Re: [PacketFence-users] 4.1 upgrade
Tim,
Memcached should not be managed by the system any more.
Do the following
service memcached stop
killall memcached #for good measure
chkconfig --del memcached
/usr/local/pf/bin/pfcmd service memcached start
For the detection issue can you show me the following.
grep '^snort' /usr/local/pf/conf/pf.conf
Let me know if this helps.
Thanks
James Rouzier
[email protected]<mailto:[email protected]> :: +1.514.755.3630 ::
http://www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://www.packetfence.org)
On 12/12/2013, 11:09 AM, Palmer, Tim wrote:
After getting past the Linux::FD issue, which I suspect is my own yum problem
somehow, my upgrade seems to be in decent shape (yes, you really must run the
db schema update if you want access to anything).
However, having detect enable issues.
* Snort was starting fine on 4.0.6_2
* Detection is enabled
* [root@pf-test pf]# grep '^detect' conf/pf.conf
* detection=enabled
* An interface is set as monitor
* grep '^type=mon' conf/pf.conf
* type=monitor
* Web interface Status:Services doesn't show snort at all
* bin/pfcmd service pf status agrees
* snort|0|0
So, apparently I have detection disabled, but I think I have it enabled. Hints?
Also, memcached dies immediately.
And apparently I don't understand changes in the portal profiles, as none of my
Internal Users Sources aren't being checked. I still have more to check before
worrying too much about this.
A fine day to you,
Tim
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance affects
their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, &
PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance affects
their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, &
PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
