Re: prelude-admin list shows empty profile
Yoann Vandoorselaere <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1208454569.6459.29.camel@arwen> |
Le jeudi 17 avril 2008 à 10:41 -0700, LC Bruzenak a écrit : > > Where would I be able to see those IDs for correlation to the > profile? > > > Could you please provide us with the output of: prelude-admin > list -l > This will provide more information about each sensor > analyzerID. > > > > [root@v6auditsvr ~]# prelude-admin list -l > Profile UID GID AnalyzerID Permission Issuer > AnalyzerID > -------------------------------------------------------------------- > prelude-lml root root 1850024011404062 idmef:w 3972034208352731 3972034208352731 is your local manager. > auditd root root 68231058835998 idmef:w 3972034208352731 same here > prelude-manager root root 3972034208352731 idmef:w 3972034208352731 It look like you registered this Prelude-Manager to itself, most probably a prelude-adduser mistake. > idmef:w 676935298793643 > idmef:w 2425523859259492 And I guess both theses are remote Prelude-Manager which your local manager relays alerts to. Regards, -- Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies Tel: +33 (0)8 70 70 21 58 Fax: +33(0)4 78 42 21 58 http://www.prelude-ids.com _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user