Re: [psad-discuss] psad no detect nmap
hello, i have uninstall psad and now when i start psad give me this error > sudo /etc/init.d/psad restart Can't load '/usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so' for module Date::Calc: /usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so: undefined symbol: DateCalc_Day_of_Week_to_Text_ at /usr/lib/perl/5.18/DynaLoader.pm line 184. at /usr/sbin/psad line 3214. Compilation failed in require at /usr/sbin/psad line 3214. Starting psad: Can't load '/usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so' for module Date::Calc: /usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so: undefined symbol: DateCalc_Day_of_Week_to_Text_ at /usr/lib/perl/5.18/DynaLoader.pm line 184. at /usr/sbin/psad line 3214. Compilation failed in require at /usr/sbin/psad line 3214. Às 12:10 de 20-12-2015, hernani coelho escreveu: > hello, > > sorry Michael Rash i send email to your private email. > > psad give me this error when i start psad and no detect nmap -->> > > sudo psad -S > > [-] psad: pid file /var/run/psad/psadwatchd.pid does not exist for > psadwatchd on hernani > [-] psad: pid file /var/run/psad/psad_fw_read.pid does not exist for > psad_fw_read on hernani > [+] psad (pid: 7466) %CPU: 0.0 %MEM: 0.5 > Running since: Sun Dec 20 12:01:41 2015 > Command line arguments: [none specified] > Alert email address(es): coelho.hern...@sapo.pt > > > -- > ___ > psad-discuss mailing list > psad-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/psad-discuss > -- ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
Re: [psad-discuss] psad no detect nmap
when i make this command --->> sudo /etc/init.d/psad start give me this ---> Starting psad: Can't load '/usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so' for module Date::Calc: /usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so: undefined symbol: DateCalc_Day_of_Week_to_Text_ at /usr/lib/perl/5.18/DynaLoader.pm line 184. at /usr/sbin/psad line 3214. Compilation failed in require at /usr/sbin/psad line 3214. is almost same thing that >> sudo /etc/init.d/psad*restart* hernnai Às 12:17 de 20-12-2015, hernani coelho escreveu: hello, i have uninstall psad and now when i start psad give me this error > sudo /etc/init.d/psad restart Can't load '/usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so' for module Date::Calc: /usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so: undefined symbol: DateCalc_Day_of_Week_to_Text_ at /usr/lib/perl/5.18/DynaLoader.pm line 184. at /usr/sbin/psad line 3214. Compilation failed in require at /usr/sbin/psad line 3214. Starting psad: Can't load '/usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so' for module Date::Calc: /usr/lib/psad/i686-linux-gnu-thread-multi-64int/auto/Date/Calc/Calc.so: undefined symbol: DateCalc_Day_of_Week_to_Text_ at /usr/lib/perl/5.18/DynaLoader.pm line 184. at /usr/sbin/psad line 3214. Compilation failed in require at /usr/sbin/psad line 3214. Às 12:10 de 20-12-2015, hernani coelho escreveu: hello, sorry Michael Rash i send email to your private email. psad give me this error when i start psad and no detect nmap -->> sudo psad -S [-] psad: pid file /var/run/psad/psadwatchd.pid does not exist for psadwatchd on hernani [-] psad: pid file /var/run/psad/psad_fw_read.pid does not exist for psad_fw_read on hernani [+] psad (pid: 7466) %CPU: 0.0 %MEM: 0.5 Running since: Sun Dec 20 12:01:41 2015 Command line arguments: [none specified] Alert email address(es): coelho.hern...@sapo.pt -- ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss -- ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss -- ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
[psad-discuss] help with psad and alerts
when i start any software like windows in virtualbox or tablet to network, psad give me alerts from source. how can i stop this alerts from source?? the first SRC: is my pc the second SRC: is windows in virtualbox were is an example ---> SRC: 192.168. DL: 2, Dsts: 1, Pkts: 22, Total protocols: 1, Unique sigs: 0, Email alerts: 4, Local IP DST: 224.0.0.251 Scanned ports: UDP 5353, Pkts: 22, Chain: OUTPUT, Intf: wlan0 Total scanned IP protocols: 1, Chain: OUTPUT, Intf: wlan0 SRC: 192.168. DL: 2, Dsts: 2, Pkts: 16, Total protocols: 2, Unique sigs: 0, Email alerts: 1, Local IP DST: 192.168.1.255, Local IP Scanned ports: UDP 137, Pkts: 15, Chain: INPUT, Intf: wlan0 Total scanned IP protocols: 1, Chain: INPUT, Intf: wlan0 DST: 255.255.255.255 Scanned ports: UDP 67, Pkts: 1, Chain: INPUT, Intf: wlan0 Total scanned IP protocols: 1, Chain: INPUT, Intf: wlan0 -- Go from Idea to Many App Stores Faster with Intel(R) XDK Give your users amazing mobile app experiences with Intel(R) XDK. Use one codebase in this all-in-one HTML5 development environment. Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs. http://pubads.g.doubleclick.net/gampad/clk?id=254741911=/4140 ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
[psad-discuss] help with file ssmtp
hello, *i install psad on ubuntu 14.04 when i make this command * sudo /etc/init.d/psad restart *give me this error* Starting psad: mail: RCPT TO:[psad-status] firewall setup warning on hernani!@hernani (553 we don't relay (#5.7.1)) *were is my file ssmtp * # # Config file for sSMTP sendmail # # The person who gets all mail for userids 1000 # Make this empty to disable rewriting. root=coelho.hernani@ # The place where the mail goes. The actual machine name is required no # MX records are consulted. Commonly mailhosts are named mail.domain.com mailhub=smtp.sapo.pt:587 # Where will the mail seem to come from? #rewriteDomain= # The full hostname hostname=hernani # Are users allowed to set their own From: address? # YES - Allow the user to specify their own From: address # NO - Use the system generated From: address FromLineOverride=NO AuthUser=coelho.hern...@sapo.pt AuthPass=hernani UseTLS=YES UseSTARTTLS=YES *i can`t initiating psad**or receive emails ** **can someone help me?** * thanks hernani -- Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
Re: [psad-discuss] ubuntu and psad
On 09/10/2012 08:26 PM, Johannes Lavre wrote: Den 10.09.2012 02:12, skrev hernani: hello, I install ubuntu 12.04 and psad, but psad no detect activity scanner nmap, i install version 2.2 of psad. Psad dont show any errors. can someone help me? Thank you hernani -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss - No virus found in this message. Checked by AVG - www.avg.com Version: 2012.0.2221 / Virus Database: 2437/5260 - Release Date: 09/10/12 Make sure iptables is logging And check your syslog for errors. And insted of creating a psadfifo pipe you can enter the log file directly if psad config that psad should watch for iptables log messages. http://www.cipherdyne.org/psad/docs/syslog.html http://www.cipherdyne.org/psad/docs/fwconfig.html hello, thank you for your answer, i get psad to work, now i install fwsnort and when i run this command --- /sbin/iptables-restore /var/lib/fwsnort/fwsnort.save give me this error --- Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`). Bad argument `bm' Error occurred at line: 9500 Try `iptables-restore -h' or 'iptables-restore --help' for more information. Thank you hernani -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss