Segmentation fault upon startup of Prelude-LML

"Trevor McLeod" <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Hello,

 

 I have started the prelude-manager as a daemon without problem.

 However, when I start prelude-lml the following messages are printed:

 

 23 Mar 11:32:54 (process:3489) INFO: PCRE plugin loaded 443 rules.

 23 Mar 11:32:54 (process:3489) INFO: Connecting to 127.0.0.1:4690

    prelude Manager server.

    Segmentation fault

 

 In /var/log/messages:

 

 Mar 23 11:32:54 pegasus prelude-manager:

   INFO: [127.0.0.1:40679 0xbab0e49c7b11b idmef:w]:

   TLS authentication succeed: client certificate is trusted.

 Mar 23 11:32:54 pegasus kernel: prelude-lml[3489]:

   segfault at 11 ip b7de20f4 sp bf990ed0 error 4 in

   libgnutls.so.26.4.5[b7d90000+ac000]

 Mar 23 11:32:54 pegasus prelude-manager:

   INFO: [127.0.0.1:40679 0xbab0e49c7b11b idmef:w]: closing connection.

 

 I am evaluating various HIDS as part of a project here at UBC.

 I have installed Prelude on a workstation running SuSE Linux 11.1.

 At present we use syslog to gather all of our host logs on a central 

 production server.  That server, in turn, forwards the events to my 

 SuSE workstation where I am piloting Prelude.

 

 I have installed Prelude-Manager, Prelude-Correlator, Prelude-LML, 

 Prelude-Prewikka, libprelude, libpreludeDB and the various 

 prerequistes (as documented in the wiki) without any problems.

 

 Similarly, I have registered the agent (prelude-lml) with the manager

 (prelude-manager) without any problems.

 

 I am not a professional programmer although I know how to program.

 My expertise is in IT infrastructure support.

 

 I would appreciate any advice on the next steps to take to resolve this
problem.

 

 Cheers!

 

 Trevor McLeod

 Systems Analyst

 University of British Columbia

 Vancouver, BC, Canada

 

 

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.