Segmentation fault upon startup of Prelude-LML
"Trevor McLeod" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Hello,
I have started the prelude-manager as a daemon without problem.
However, when I start prelude-lml the following messages are printed:
23 Mar 11:32:54 (process:3489) INFO: PCRE plugin loaded 443 rules.
23 Mar 11:32:54 (process:3489) INFO: Connecting to 127.0.0.1:4690
prelude Manager server.
Segmentation fault
In /var/log/messages:
Mar 23 11:32:54 pegasus prelude-manager:
INFO: [127.0.0.1:40679 0xbab0e49c7b11b idmef:w]:
TLS authentication succeed: client certificate is trusted.
Mar 23 11:32:54 pegasus kernel: prelude-lml[3489]:
segfault at 11 ip b7de20f4 sp bf990ed0 error 4 in
libgnutls.so.26.4.5[b7d90000+ac000]
Mar 23 11:32:54 pegasus prelude-manager:
INFO: [127.0.0.1:40679 0xbab0e49c7b11b idmef:w]: closing connection.
I am evaluating various HIDS as part of a project here at UBC.
I have installed Prelude on a workstation running SuSE Linux 11.1.
At present we use syslog to gather all of our host logs on a central
production server. That server, in turn, forwards the events to my
SuSE workstation where I am piloting Prelude.
I have installed Prelude-Manager, Prelude-Correlator, Prelude-LML,
Prelude-Prewikka, libprelude, libpreludeDB and the various
prerequistes (as documented in the wiki) without any problems.
Similarly, I have registered the agent (prelude-lml) with the manager
(prelude-manager) without any problems.
I am not a professional programmer although I know how to program.
My expertise is in IT infrastructure support.
I would appreciate any advice on the next steps to take to resolve this
problem.
Cheers!
Trevor McLeod
Systems Analyst
University of British Columbia
Vancouver, BC, Canada
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user