Re: Prewikka not reporting agents or events
Jason Dixon <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Nov 20, 2008 at 11:23:29AM -0500, ScottO wrote: > That's truly strange. It will normally print something right around line > 226 in your output, right after the Decoding Ethernet on interface blah > line. > > I've only ever seen where it says it successfully authenticated or it spits > an error for a non-existent profile, permissions, or whatever the error is. > I'm not sure I've ever tried starting it when there was an issue with snort > not compiling with prelude or some sort of error on that side - but imagine > it would spit out an error indicating unknown or unsupported option. I suspect it might have to do with building Snort 64-bit. Although it built it fine, I had to use --nodeps when installing the rpm. Otherwise it complains: $ sudo rpm -ivh /usr/src/redhat/RPMS/x86_64/snort-2.8.3.1-1.x86_64.rpm error: Failed dependencies: libprelude.so.2()(64bit) is needed by snort-2.8.3.1-1.x86_64 I compiled and installed all prelude components on the same system, but it only installed files in /usr/local/lib. Anyone else that's encountered this and knows how to get prelude to install the libs in the correct location (/usr/local/lib64)? $ ls -l /usr/local/lib total 4000 drwxr-xr-x 3 root root 4096 Nov 19 11:42 libpreludedb -rwxr-xr-x 1 root root 917 Nov 19 12:23 libpreludedb.la lrwxrwxrwx 1 root root 21 Nov 19 12:23 libpreludedb.so -> libpreludedb.so.0.4.8 lrwxrwxrwx 1 root root 21 Nov 19 12:23 libpreludedb.so.0 -> libpreludedb.so.0.4.8 -rwxr-xr-x 1 root root 222404 Nov 19 12:23 libpreludedb.so.0.4.8 -rwxr-xr-x 1 root root 988 Nov 19 12:22 libprelude.la lrwxrwxrwx 1 root root 20 Nov 19 12:22 libprelude.so -> libprelude.so.2.17.2 lrwxrwxrwx 1 root root 20 Nov 19 12:22 libprelude.so.2 -> libprelude.so.2.17.2 -rwxr-xr-x 1 root root 3794059 Nov 19 12:22 libprelude.so.2.17.2 drwxr-xr-x 2 root root 4096 Nov 19 12:11 prelude-lml drwxr-xr-x 5 root root 4096 Nov 19 12:07 prelude-manager Thanks, -- Jason Dixon OmniTI Computer Consulting, Inc. [email protected] 443.325.1357 x.241 _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user