[Prelude Hybrid IDS] #202: XML Log Strange behaviour
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#202: XML Log Strange behaviour
----------------------------------------------+-----------------------------
Reporter: olivier.lechevalier in gmail.com | Owner: yoann
Type: defect | Status: new
Priority: normal | Milestone:
Component: prelude-manager | Version: 0.9
Severity: normal | Keywords:
----------------------------------------------+-----------------------------
Hello,
I have just finished setup one prelude installation coupled with samhain.
I did encounter a strange behaviour.
First my detailed setup I have samhain, yule and prelude on the same
server. Yule is compiled to use prelude. Until here no problem.
When Samhain report some event the XML logger seem to get in infinite loop
and begin to fill up the harddisk(sorry I didn't check if it dump the same
message all the time or a set of message). I think they might be a problem
with this log facility, on the other hand the text and DB log facilities
work perfectly.
For the moment I had disabled the XML log.
Regards
Olivier
PS: thanks for this great project I really believe Prelude is one of the
most avanced security tool available on open source community ( and might
be commercial software too)
--
Ticket URL: <https://trac.prelude-ids.org/ticket/202>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel