Re: [psad-discuss] psad(psadwatchd): restarting psad on localhost

2014-02-05 Thread fddi
I think I'm getting closer. I start up the service psad service (service psad start) then looking at the pids in the /var/run/psad/files.  They are all updated. The psad process is correct.  It's in the psadwatched side of things that it's not detecting the running process and spawning.  Is tha

Re: [psad-discuss] psad(psadwatchd): restarting psad on localhost

2014-02-05 Thread fddi
Thanks Mike, If you could take a shot at it I would be greatly appreciative.   I'm not sure I have the chops to pull it off properly and it should probably be something that gets fed back in upstream. Thanks, Tim > Thanks for sending the init script over. That script looks to be the cause of t

Re: [psad-discuss] psad(psadwatchd): restarting psad on localhost

2014-02-04 Thread Michael Rash
On Tue, Feb 4, 2014 at 9:36 AM, fddi wrote: > Thanks Mike, > > How was psad installed on your system? > > I took the latest src.rpm from the Fedora 20 repo and rebuilt it on RHEL6 - > which makes sense that the latest Fedora is using the newer style compared to > RHEL6. I bet it would have bee

Re: [psad-discuss] psad(psadwatchd): restarting psad on localhost

2014-02-04 Thread fddi
Thanks Mike, How was psad installed on your system? I took the latest src.rpm from the Fedora 20 repo and rebuilt it on RHEL6 - which makes sense that the latest Fedora is using the newer style compared to RHEL6. I bet it would have been a clean install on RHEL7 beta. Here is the init s

Re: [psad-discuss] psad(psadwatchd): restarting psad on localhost

2014-02-03 Thread Michael Rash
On Mon, Feb 3, 2014 at 5:23 PM, fddi wrote: > Hi, > Hello Tim, > I'm trying to get psad working on RHEL6.5. > > I am using the generic psad.conf file with IPV6 disabled. I have rsyslog > configured and running. > > (a rebuilt src.rpm from Fedora 20) > > My version is: > [+] psad v2.2.1 b