Re: Prewikka not reporting agents or events
Jason Dixon <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Nov 21, 2008 at 09:34:40AM -0500, Jason Dixon wrote: > > Sorry, I spoke too soon. Although snort claims to connect with Prelude > Manager, I'm still not seeing any agents or events in prewikka. I > restarted prelude-manager with debugging enabled and can see a steady > flow of alerts from snort. I went back and confirmed that libpreludedb > support was built in for prelude-manager: > > $ grep libpreludedb prelude-manager-0.9.14.2/config.log > configure:33403: checking for libpreludedb-config > configure:33421: found /usr/local/bin/libpreludedb-config > configure:33434: result: /usr/local/bin/libpreludedb-config > configure:33443: checking for libpreludedb - version >= 0.9.4 > ac_cv_path_LIBPRELUDEDB_CONFIG=/usr/local/bin/libpreludedb-config > LIBPRELUDEDB_CONFIG='/usr/local/bin/libpreludedb-config' Argh, I should be more patient this morning. Need more coffee. :) I missed some configuration settings for the prelude-manager. Everything seems to be working smoothly now. My apologies for the extra noise. I appreciate everyone's help in getting this working. Best wishes, -- Jason Dixon OmniTI Computer Consulting, Inc. [email protected] 443.325.1357 x.241 _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user