Question on Prelude installation
Thierry Herbreteau <[email protected]> Thu, 17 Dec 2009 19:57:38 +0100
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, I'm trying to install prelude for a project at university. I'm running Ubuntu 9.10 in Vmware (on a PC). I installed all the prelude modules with Synaptic packet manager (except prelude-lml that produced errors, so I got the sources and recompiled them). I registered prelude-lml and snort as agents. Prewikka works also (except that it does not see snort in the agent list, if someone can point me out to the right place to make snort working.... Is --prelude-enable flag for snort enough ? Unfortunately, when I shut down linux and restart it later, none of the modules are re-launched automatically. And when I try to start prelude-manager manually, I get an error and cannot launch it without reinstalling. Below is the traces and the commands I entered following reboot: root@ubuntu:~/util# prelude-manager 17 Dec 17:24:46 (process:2654) INFO: Subscribing Normalize to active decoding plugins. 17 Dec 17:24:46 (process:2654) INFO: server started (listening on 127.0.0.1 port 4690). 17 Dec 17:24:47 (process:2654) INFO: Subscribing db[default] to active reporting plugins. 17 Dec 17:24:47 (process:2654) ERROR: could not open /var/run/prelude-manager for reading/writing. (manager-auth.c:633 manager_auth_init) 17 Dec 17:24:47 (process:2654) WARNING: Profile 'prelude-manager' does not exist. In order to create it, please run: prelude-admin add "prelude-manager" --uid 0 --gid 0 root@ubuntu:~/util# prelude-admin add "prelude-manager" --uid 0 --gid 0 Could not create already existing profile 'prelude-manager'. root@ubuntu:~/util# prelude-admin list -l Profile UID GID AnalyzerID Permission Issuer AnalyzerID ---------------------------------------------------------------------------------- prelude-lml root root 856293185750387 idmef:w admin:r 2920162410428449 prelude-manager prelude prelude 2920162410428449 n/a n/a snort root root 3089474316209304 idmef:w admin:r 2920162410428449 There's probably something I forgot during installation... Any help would be really appreciated ;-) Thx. Thierry. _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user